trivy-checks

trivy-checks contains misconfiguration checks for Trivy

trivy-checks is an Aqua Security open source project. Learn about our open source work and portfolio here. Join the community, and talk to us about any matter in GitHub Discussion.

Project Layout

The directory structure is broken down as follows:

• checks/ - the checks themselves, grouped by target: cloud/<provider>/<service>/, docker/, kubernetes/.
• lib/ - shared Rego helpers the checks import: lib/cloud, lib/kubernetes, lib/docker, lib/test.
• avd_docs/ - documentation generated from the check examples by make docs, published on avd.aquasec.com.
• commands/ - Node-collector commands.
• pkg/compliance/ - compliance report specs, one yaml per report ID.
• cmd/ - development tools, e.g. cmd/id for the next free check ID and cmd/avd_generator behind make docs.
• examples/ - sample IaC and custom checks used by the integration tests.
• integration/ - integration tests that run real Trivy.
• test/ - Go tests over the checks and their metadata.

See CONTRIBUTING.md for how to write a check.