Software vulnerabilities within containers can create security risks to your Kubernetes environment. This lab will allow you to practice your skills with scanning images using Trivy to determine whether they contain critical vulnerabilities.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Scan the Images with Trivy and Save the Results
Check all of the Pods in the
questionablesoftnamespace. Scan their images with Trivy and save the results for each scan to files in/home/cloud_user. Give each file the name of the image and the.logextension (e.g.,/home/cloud_user/myimage:1.1.0.log).Note: Trivy is already installed on the control plane node. You do not need to install it yourself.
- Delete Pods with Major Vulnerabilities
Delete any Pods that have high- or critical-severity vulnerabilities in their images. You can delete Pods with
--forceif you wish.
