Skip to content

Solve the issue of the hook's open PR on /trivy #24

Description

@Emyrk

Either a fork is required, or an alternate solution.

The two things we need is:

  • Preload the eval context with values. I intend to load in terraform plan output, and possibly even tfstate. This is so I can reference resolved data blocks if I have this information.

  • Apply semantics to arbitrary data blocks. This effectively "simulates" what the terraform provider would do for a given block, when the semantics can be done locally (without some external api or something). This is very similar to the presets you referred to in how some of your aws blocks are handled today.

Open PR here: aquasecurity/trivy#8302

This PR will likely not be accepted. If a fork is created, this fork needs to be maintained, ideally with patches to keep tracking the upstream simple.

Activity

  1. self-assigned this
    on Mar 5, 2025
  2. added theissue type on Mar 5, 2025
  3. added
    early-accesscandidate for an early-access, or experimental, release
    on Apr 4, 2025
  4. added
    upstreama ticket that upstreams work into another project
    on Apr 7, 2025
  5. removed
    early-accesscandidate for an early-access, or experimental, release
    on Apr 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

upstreama ticket that upstreams work into another project

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions