Continuous scanning - Trivy

[javixeneize]

Hi

Quick question about trivy. Does it run continuous scanning against the images running in the cluster? If so, how often? Every time the DB is updated?

Thanks

[NissesSenap]

This is supported through TTL.
You can see how to use it in the helm chart here:

starboard/deploy/helm/values.yaml

Lines 40 to 43 in 3a8075a

	# vulnerabilityScannerEnabled the flag to enable vulnerability scanner
	vulnerabilityScannerEnabled: true
	# vulnerabilityScannerReportTTL the flag to set how long a vulnerability report should exist. "" means that the vulnerabilityScannerReportTTL feature is disabled
	vulnerabilityScannerReportTTL: ""

There is also support for it in the operator.
I personally run my cluster with a TTL of 24 hours to continuously rescan my images.