Commit 0949f896 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

docs: fix Trivy links (changed domain)

parent 4371f590

README.md

+3 −3
Original line number Diff line number Diff line
@@ -575,20 +575,20 @@ In addition to a textual report in the console, this job produces the following 


### `tf-trivy` job



[trivy](https://aquasecurity.github.io/trivy/latest/docs/configuration/) is used to perform static analysis of your terraform templates to spot potential security issues and uses the following variables:

[trivy](https://trivy.dev/docs/latest/configuration/) is used to perform static analysis of your terraform templates to spot potential security issues and uses the following variables:



| Input / Variable      | Description                              | Default value     |

| --------------------- | ---------------------------------------- | ----------------- |

| `trivy-image` / `TF_TRIVY_IMAGE` | the Docker image used to run trivy       | `docker.io/aquasec/trivy`  <br/>[![Trivy Badge](https://to-be-continuous.gitlab.io/doc/secu/trivy-badge-TF_TRIVY_IMAGE.svg)](https://to-be-continuous.gitlab.io/doc/secu/trivy-TF_TRIVY_IMAGE) |

| `trivy-disabled` / `TF_TRIVY_DISABLED` | Set to `true` to disable trivy            | _none_ (enabled) |

| `trivy-args` / `TF_TRIVY_ARGS` | trivy config [options and args](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_config/) | `--disable-telemetry --skip-version-check .` |

| `trivy-args` / `TF_TRIVY_ARGS` | trivy config [options and args](https://trivy.dev/docs/latest/references/configuration/cli/trivy_config/) | `--disable-telemetry --skip-version-check .` |



In addition to a textual report in the console, this job produces the following reports, kept for one day and only available for download by users with the Developer role or higher:



| Report         | Format                                                                       | Usage             |

| -------------- | ---------------------------------------------------------------------------- | ----------------- |

| `$TF_PROJECT_DIR/reports/tf-trivy.codeclimate.json` | [Code Climate](https://github.com/aquasecurity/trivy/blob/main/contrib/gitlab-codequality.tpl) | [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportscodequality) |

| `$TF_PROJECT_DIR/reports/tf-trivy.trivy.json` | Trivy [JSON](https://aquasecurity.github.io/trivy/latest/docs/configuration/reporting/#json) report | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/trivy//)<br/>_This report is generated only if DefectDojo template is detected_ |

| `$TF_PROJECT_DIR/reports/tf-trivy.trivy.json` | Trivy [JSON](https://trivy.dev/docs/latest/configuration/reporting/#json) report | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/trivy//)<br/>_This report is generated only if DefectDojo template is detected_ |



### `tf-checkov` job

kicker.json

+2 −2
Original line number Diff line number Diff line
@@ -95,7 +95,7 @@ 
    {

      "id": "trivy",

      "name": "trivy",

      "description": "Detect security issues with [trivy config](https://aquasecurity.github.io/trivy/latest/docs/scanner/misconfiguration/)",

      "description": "Detect security issues with [trivy config](https://trivy.dev/docs/latest/scanner/misconfiguration/)",

      "disable_with": "TF_TRIVY_DISABLED",

      "variables": [

        {
@@ -106,7 +106,7 @@ 
        },

        {

          "name": "TF_TRIVY_ARGS",

          "description": "trivy config [options and args](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_config/)",

          "description": "trivy config [options and args](https://trivy.dev/docs/latest/references/configuration/cli/trivy_config/)",

          "default": "--disable-telemetry --skip-version-check ."

        }

      ]

templates/gitlab-ci-terraform.yml

+1 −1
Original line number Diff line number Diff line
@@ -73,7 +73,7 @@ spec: 
      description: trivy docker image

      default: docker.io/aquasec/trivy

    trivy-args:

      description: trivy config [options and args](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_config/)

      description: trivy config [options and args](https://trivy.dev/docs/latest/references/configuration/cli/trivy_config/)

      default: --disable-telemetry --skip-version-check .

    checkov-enabled:

      description: Enable checkov