feat: enable trivy server with self-signed certificates

[dirien]

Signed-off-by: Engin Diri engin.diri@mail.schwarz

fixes #1002

There are situations, where you have a self-signed certifacte for the Trivy Server. e.g. in our company, we have to use our own company wide PKI. Or when you use LE staging ACME. This will appear as x509 certificate signed by unknown authority

With this PR, we can set a new optional variable called trivy.insecureServer. This sets in the background the env variable TRIVY_INSECURE. It's different to existing trivy.insecureRegistry parameter. As we are not really talking about the registry.

Looking for your feedback.

[CLAassistant]

All committers have signed the CLA.

[codecov]

Codecov Report

Merging #1003 (f6fb8b4) into main (f402b84) will decrease coverage by 0.08%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main    #1003      +/-   ##
==========================================
- Coverage   58.78%   58.70%   -0.09%     
==========================================
  Files          65       65              
  Lines        8493     8502       +9     
==========================================
- Hits         4993     4991       -2     
- Misses       2987     2996       +9     
- Partials      513      515       +2     

Impacted Files	Coverage Δ
pkg/plugin/trivy/plugin.go	81.43% <100.00%> (+0.15%)	⬆️
pkg/operator/controller/ciskubebenchreport.go	52.58% <0.00%> (-2.40%)	⬇️
pkg/operator/controller/vulnerabilityreport.go	57.31% <0.00%> (-1.53%)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f402b84...f6fb8b4. Read the comment docs.

[chen-keinan]

@dirien thank you for the contribution LGTM !!

[danielpacak]

Thank you for working on this patch @dirien Please see my comments before we marge this PR.

[dirien]

Thank you for working on this patch @dirien Please see my comments before we marge this PR.

Thanks for your feedback @danielpacak! Appreciate this very much! I changed the points and will create a PR for the version bump!

Looking forward

[dirien]

Done for version PR bump -> #1008

[danielpacak]

Thank you @dirien !

[danielpacak]

@dirien , could you sign our CLA agreement, which is one of required checks before we merge the PR?

[dirien]

@danielpacak, done! I clicked again on the link!