-
Notifications
You must be signed in to change notification settings - Fork 545
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
docs: Add Trivy migration guide (#1961)
- Loading branch information
Showing
2 changed files
with
48 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
# Moving towards configuration scanning with Trivy | ||
Overtime we've taken [trivy][trivy] to be the go-to scanning tool for a vareity of things. This also includes terraform scanning. | ||
|
||
This section describes some differences between Trivy and tfsec. | ||
|
||
| Feature | Trivy | tfsec | | ||
|----------------------|--------------------------------------------------------|----------------------| | ||
| Policy Distribution | Embedded and Updated via Registry | Embedded | | ||
| Custom Policies | Rego | Rego, JSON, and YAML | | ||
| Supported Formats | Dockerfile, JSON, YAML, Terraform, CloudFormation etc. | Terraform Only | | ||
|
||
|
||
# Comparison with examples | ||
## Simple scan | ||
### With Trivy | ||
```shell | ||
$ trivy config <dir> | ||
``` | ||
### With tfsec | ||
```shell | ||
$ tfsec <dir> | ||
``` | ||
|
||
## Passing tfvars | ||
### With Trivy | ||
```shell | ||
$ trivy --tf-vars <vars.tf> <dir> | ||
``` | ||
### With tfsec | ||
```shell | ||
$ tfsec <dir> --tf-vars-file <vars.tf> | ||
``` | ||
|
||
## Report formats | ||
### With Trivy | ||
```shell | ||
$ trivy config --format <format-type> <dir> | ||
``` | ||
|
||
### With tfsec | ||
```shell | ||
$ tfsec <dir> --format <format-type> | ||
``` | ||
|
||
We welcome any feedback if you find features that today are not available with Trivy misconfigration scanning that are available in tfsec. | ||
|
||
[trivy]: https://github.com/aquasecurity/trivy |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters