New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Investigate statnett/image-scanner-operator run issue #1

Closed

h0x0er opened this issue Jan 24, 2023 · 7 comments

Owner

h0x0er commented Jan 24, 2023 •

edited

Loading

Issue: step-security/harden-runner#235

Research

Run: https://app.stepsecurity.io/github/statnett/image-scanner-operator/actions/runs/3953485836
Fork Run: https://app.stepsecurity.io/github/h0x0er/image-scanner-operator/actions/runs/3983491547

Owner Author

h0x0er commented Jan 24, 2023 •

edited

Loading

Overview

Trivy is a code scanner: repo

It is making request at Port 9.
Unable to resolve domain name. Direct IP is displayed instead of full domain.
Getting different IPs for github-package domain and trying to visit Port 9

Owner Author

h0x0er commented Jan 24, 2023 •

edited

Loading

Trivy in StateNett

https://github.com/h0x0er/image-scanner-operator/blob/main/config/trivy-server/stateful_set.yaml

Maybe problem occurs when trivy is pulled from docker

github-actions bot commented Feb 7, 2024

Hello world ! 👋

1 similar comment

github-actions bot commented Feb 7, 2024

Hello world ! 👋

h0x0er closed this as completed

github-actions bot commented Feb 9, 2024

Hello world ! 👋

2 similar comments

github-actions bot commented Feb 9, 2024

Hello world ! 👋

github-actions bot commented Feb 9, 2024

Hello world ! 👋

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment