Harbor Adapter Trivy

Harbor Adapter Trivy is an integrated vulnerability scanning service used within to automatically scan container images for known security vulnerabilities. It leverages a lightweight and efficient security scanner, to identify Common Vulnerabilities and Exposures (CVEs) in operating system packages and application dependencies.

Features of Harbor Adapter Trivy:

• Automatic vulnerability scanning of container images stored in Harbor.
• Detection of known CVEs in OS packages and application dependencies.
• Classification of vulnerabilities by severity (Critical, High, Medium, Low).
• Seamless integration with Harbor Web UI for centralized security visibility.
• Supports on-demand and scheduled image scanning.

To enable Harbor Adapter Trivy, perform the following steps:

 
$ sudo ./install.sh

Access the Harbor Adapter Trivy Web Interface:

http://

To check installed version of Harbor Adapter Trivy ,Run the following command:

$ docker exec -it harbor-trivy trivy --version $ cat harbor.yml | grep version Disclaimer: Harbor Adapter Trivy is provided under applicable open-source licenses and is distributed “as is.” Users are responsible for maintaining updated vulnerability databases, configuring appropriate scan policies, and following security best practices when deploying container images in production environments.