Support parallel execution of trivy k8s containers on the same volume

[festeveira]

Description

Currently it is not possible to run trivy-operator with TMPDIR configured to use the same volume, when jobs are running in parallel.

Because the process-specific temp directory depends on the process pid, as can be seen in:

trivy/pkg/x/os/os.go

Line 25 in 29f0347

tempDir := filepath.Join(os.TempDir(), fmt.Sprintf("trivy-%d", pid))

, it is not possible to run several instances of containers in parallel, jobs sometimes remove the directory prematurely causing other jobs to fail.

I believe that simply making the directory where image layers are temporarily stored a random string should suffice.

Target

Container Image

Scanner

Vulnerability

[afdesk]

Hi @festeveira!
thanks for your suggestion!

let's discuss this feature in aquasecurity/trivy-operator#2795 at first.
because Trivy already has ways to config a cache folder.