Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Export fields Target and Class as labels #201

Open
d-mankowski-synerise opened this issue Mar 12, 2023 · 1 comment
Open

Export fields Target and Class as labels #201

d-mankowski-synerise opened this issue Mar 12, 2023 · 1 comment

Comments

@d-mankowski-synerise
Copy link

Hello,
in vulnerability reports created by trivy-operator there are optional report fields, like Target or Class:

  - class: lang-pkgs
    fixedVersion: "1.32"
    installedVersion: "1.25"
    links: []
    primaryLink: https://avd.aquasec.com/nvd/cve-2022-38752
    resource: org.yaml:snakeyaml
    score: 6.5
    severity: MEDIUM
    target: Java
    title: 'snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode'
    vulnerabilityID: CVE-2022-38752

It would be really cool to see a summary in Grafana dashboards what % of vulnerabilities come from OS vs application. It seems like adding these fields to exporter would be as simple as adding two more variables here and here, since these types are defined in Vulnerability struct (although, my golang knowledge is very, very limited).

@stone-z
Copy link
Contributor

stone-z commented Apr 24, 2023

Hey @d-mankowski-synerise, sorry for the delay, I somehow overlooked your issue. That does sound like a cool use case, I'll take a look with the team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants