undefined | Better HN

0 pointsstaticassertion3d ago0 comments

You only need internet access to grab the image, I don't think trivy requires internet access itself. All of my image scanning tools run in isolation.

0 comments

mkesper2d ago

It needs internet access for upgrading the check bundle and for full Java library resolution (pom.xml). See e.g. https://github.com/aquasecurity/trivy/discussions/9698

staticassertionOP2d ago

Nice, thanks! Yeah, so exfil is definitely still a thing to watch out for, even if you run in an unprivileged env.

j / k navigate · click thread line to collapse

0 pointsstaticassertion3d ago0 comments

You only need internet access to grab the image, I don't think trivy requires internet access itself. All of my image scanning tools run in isolation.

0 comments

mkesper2d ago

It needs internet access for upgrading the check bundle and for full Java library resolution (pom.xml). See e.g. https://github.com/aquasecurity/trivy/discussions/9698

staticassertionOP2d ago

Nice, thanks! Yeah, so exfil is definitely still a thing to watch out for, even if you run in an unprivileged env.

j / k navigate · click thread line to collapse