Skip to content

Solve the issue of the hook's open PR on /trivy #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Emyrk opened this issue Mar 5, 2025 · 0 comments
Open

Solve the issue of the hook's open PR on /trivy #24

Emyrk opened this issue Mar 5, 2025 · 0 comments
Assignees
Labels
upstream a ticket that upstreams work into another project

Comments

@Emyrk
Copy link
Member

Emyrk commented Mar 5, 2025

Either a fork is required, or an alternate solution.

The two things we need is:

  • Preload the eval context with values. I intend to load in terraform plan output, and possibly even tfstate. This is so I can reference resolved data blocks if I have this information.

  • Apply semantics to arbitrary data blocks. This effectively "simulates" what the terraform provider would do for a given block, when the semantics can be done locally (without some external api or something). This is very similar to the presets you referred to in how some of your aws blocks are handled today.

Open PR here: aquasecurity/trivy#8302

This PR will likely not be accepted. If a fork is created, this fork needs to be maintained, ideally with patches to keep tracking the upstream simple.

@Emyrk Emyrk self-assigned this Mar 5, 2025
@Kira-Pilot Kira-Pilot added the early-access candidate for an early-access, or experimental, release label Apr 4, 2025
@Emyrk Emyrk added the upstream a ticket that upstreams work into another project label Apr 7, 2025
@Kira-Pilot Kira-Pilot removed the early-access candidate for an early-access, or experimental, release label Apr 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
upstream a ticket that upstreams work into another project
Projects
None yet
Development

No branches or pull requests

2 participants