You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/scanning.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -82,16 +82,16 @@ To prevent deploying a container image with known vulnerabilities, you can use a
82
82
83
83
and denies admission if the image is vulnerable.
84
84
85
-
Teppei Fukuda has a [session at KubeCon this week](https://sched.co/Zekd) showing
85
+
Teppei Fukuda has a [session at KubeCon this week](https://sched.co/Zekd) showing
86
86
the use of [OPA](../policies/#general-purpose-policies) to make policy checks at the admission control stage.
87
87
88
88
## Scanning in live workloads
89
89
90
90
Scanning in the CI/CD pipeline can prevent you from storing a vulnerable image in the registry, and admission control can prevent you from deploying an image with known vulnerabilities. But you may also want the ability to check the container images used by your live workloads.
91
91
92
92
!!! tip "Security is an ongoing process"
93
-
New vulnerabilities are found all the time. An image that you scan today
94
-
might not have any vulnerablities, but a researcher may find a new issue
93
+
New vulnerabilities are found all the time. An image that you scan today
94
+
might not have any vulnerablities, but a researcher may find a new issue
95
95
that means the same image will fail the scan tomorrow.
96
96
97
97
[Starboard](https://github.com/aquasecurity/starboard) is a tool for running security tools, including Trivy, within your Kubernetes cluster. This is an easy way to create and view scans of the container images used by your running workloads. Want to give it a try?
@@ -194,7 +194,7 @@ Within this output you can see that the job ran the `trivy` command, and the las
194
194
195
195
Starboard makes it easy to run Trivy over your running workloads, and coming soon, there will be an [operator](https://github.com/aquasecurity/starboard-security-operator) that will watch for new workloads and automatically run scans over them.
196
196
197
-
Today, there is also an Octant plugin so you can view the vulnerability results through the Octant UI.
197
+
Today, there is also an [Octant plugin](https://github.com/aquasecurity/starboard-octant-plugin) so you can view the vulnerability results through the Octant UI.
0 commit comments