Harbor Adapter Trivy

Harbor Adapter Trivy is an integrated vulnerability scanning service used within to automatically scan container images for known security vulnerabilities. It leverages a lightweight and efficient security scanner, to identify Common Vulnerabilities and Exposures (CVEs) in operating system packages and application dependencies.

Features of Harbor Adapter Trivy:

• Automatic vulnerability scanning of container images stored in Harbor.
• Detection of known CVEs in OS packages and application dependencies.
• Classification of vulnerabilities by severity (Critical, High, Medium, Low).
• Seamless integration with Harbor Web UI for centralized security visibility.
• Supports on-demand and scheduled image scanning.

Harbor Adapter Trivy usage:

$ sudo su
$ apt update
$ cd /opt/harbor-trivy
$ docker compose up -d
$ docker ps -a
$ sleep 10
$ Quick health check: docker inspect trivy-adapter --format '{{.State.Health.Status}}'
 
$ Test the API:
# curl -i http://localhost:8080/

Note: You may receive a 404 Not Found or another API-related response. That does not mean the container is broken - this isn't a graphical web application.