You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I've searched for similar issues and couldn't find anything matching
I've discussed this feature request in the K8sGPT Slack and got positive feedback
Is this feature request related to a problem?
No
Problem Description
Solution Description
In addition to trivy vulnerabilityreports it should be possible to analyze trivy configauditreports.
configauditreports are also CRs like vulnerabilityreports. their fields a a little bit different and the AI prompt for configauditreports must be a little bit different.
kubectl command to get trivy configauditreports:
kubectl get configauditreports
example fields in the .report attribute for the configauditreport:
report:
checks:
- category: Kubernetes Security Check
checkID: KSV001
description: A program inside the container can elevate its own privileges and
run as root, which might give the program control over the container and node.
messages:
- Container 'my-kubernetes-component' of ReplicaSet 'my-kubernetes-component-5bd8595966'
should set 'securityContext.allowPrivilegeEscalation' to false
severity: MEDIUM
success: false
title: Process can elevate its own privileges
Benefits
users get additional AI explanation for this config reports
Potential Drawbacks
Additional Information
The text was updated successfully, but these errors were encountered:
Checklist
Is this feature request related to a problem?
No
Problem Description
Solution Description
In addition to trivy vulnerabilityreports it should be possible to analyze trivy configauditreports.
configauditreports are also CRs like vulnerabilityreports. their fields a a little bit different and the AI prompt for configauditreports must be a little bit different.
kubectl command to get trivy configauditreports:
kubectl get configauditreports
example fields in the .report attribute for the configauditreport:
Benefits
users get additional AI explanation for this config reports
Potential Drawbacks
Additional Information
The text was updated successfully, but these errors were encountered: