Windows container

[jcamu]

Hello,

I can't find if we can use trivy to scan windows container.
Is it possible?

Regards

[simar7]

If you're looking for scanning windows based images then today Trivy cannot do that.

[jcamu]

OK. is it planned?

[simar7]

At the moment we don't have any plans @jcamu - but we'll keep this issue in order to prioritize it accordingly.

As always, if it's something you'd like to help us with by contributing, we'd be happy to assist!

[github-actions[bot]]

This issue is stale because it has been labeled with inactivity.

[ishowta]

@jcamu Why did you close it? Is it implemented? I checked the documentation and could not find any mention of scan windows containers.

[jcamu]

Don't remind. As the issue was going to be closed without activity. Maybe i close it in advance but yes no news on my side for windows container scan. I can reopen it if you want, but don't think it's a trivy priority

[ishowta]

I'm sorry, I did not know that the actions/stale BOT automatically closes Issues.

ps: The Issues system for this project do not appear to be working properly

[odelaere]

Any update ?
We are having issues with Trivy the log says there were some vulnerabilities found but report shows nothing.

[itaysk]

Windows container scanning is out of scope for Trivy open source, and is available in the Aqua commercial product: https://github.com/aquasecurity/resources/blob/main/trivy-aqua.md

[sozercan]

@itaysk are there any future plans to bring this capability to OSS? Is this feature exclusive due to Aqua commercial differentation? Would you accept contributions to OSS?

[itaysk]

hi @sozercan, appreciate the proposal, but as said, this is out of scope for the project

[charleswool]

Hello @itaysk, I'd like to surface this discussion again. I understand that windows container scanning is considered as advanced capabilities. Still, is Trivy thinking of bringing that in OSS to expand the usage coverage? Also similar question to Sertac's, do you accept contributions at this moment for this change support?

[itaysk]

Hi, the previous answer is still relevant. The Trivy OSS team has other priorities. Windows Containers scanning is available in the Aqua product which is based on Trivy OSS.