Compare languages | The operator-trivy module: FAQ

How to view all resources that have not passed CIS compliance checks?

Как посмотреть все ресурсы, которые не прошли CIS compliance-проверки?

bash kubectl get clustercompliancereports.aquasecurity.github.io cis -ojson | jq ‘.status.detailReport.results | map(select(.checks | map(.success) | all | not))’

bash kubectl get clustercompliancereports.aquasecurity.github.io cis -ojson | jq ‘.status.detailReport.results | map(select(.checks | map(.success) | all | not))’

How to view resources that have not passed a specific CIS compliance check?

Как посмотреть ресурсы, которые не прошли конкретную CIS compliance-проверку?

By check id:

По id:

bash check_id=”5.7.3” kubectl get clustercompliancereports.aquasecurity.github.io cis -ojson | jq –arg check_id “$check_id” ‘.status.detailReport.results | map(select(.id == $check_id))’

bash check_id=”5.7.3” kubectl get clustercompliancereports.aquasecurity.github.io cis -ojson | jq –arg check_id “$check_id” ‘.status.detailReport.results | map(select(.id == $check_id))’

By check description:

По описанию:

bash check_desc=”Apply Security Context to Your Pods and Containers” kubectl get clustercompliancereports.aquasecurity.github.io cis -ojson | jq –arg check_desc “$check_desc” ‘.status.detailReport.results | map(select(.description == $check_desc))’

bash check_desc=”Apply Security Context to Your Pods and Containers” kubectl get clustercompliancereports.aquasecurity.github.io cis -ojson | jq –arg check_desc “$check_desc” ‘.status.detailReport.results | map(select(.description == $check_desc))’