Skip to content

Commit

Permalink
increase default trivy timeout value (#320)
Browse files Browse the repository at this point in the history
  • Loading branch information
matheusfm authored Nov 6, 2024
1 parent d5f5813 commit 765785c
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion charts/zora/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,7 @@ The following table lists the configurable parameters of the Zora chart and thei
| scan.plugins.trivy.image.pullPolicy | string | `"Always"` | Image pull policy |
| scan.plugins.trivy.env | list | `[]` | List of environment variables to set in trivy container. |
| scan.plugins.trivy.envFrom | list | `[]` | List of sources to populate environment variables in trivy container. |
| scan.plugins.trivy.timeout | string | `"10m"` | Trivy timeout |
| scan.plugins.trivy.timeout | string | `"40m"` | Trivy timeout |
| scan.plugins.trivy.insecure | bool | `false` | Allow insecure server connections for Trivy |
| scan.plugins.trivy.fsGroup | int | `nil` | Trivy fsGroup. Should be greater than 0. |
| scan.plugins.trivy.persistence.enabled | bool | `true` | Specifies whether Trivy vulnerabilities database should be persisted between the scans, using PersistentVolumeClaim |
Expand Down
2 changes: 1 addition & 1 deletion charts/zora/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -237,7 +237,7 @@ scan:
# - secretRef:
# name: trivy-credentials
# -- Trivy timeout
timeout: 10m
timeout: 40m
# -- Allow insecure server connections for Trivy
insecure: false

Expand Down
4 changes: 2 additions & 2 deletions docs/plugins/trivy.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,12 +45,12 @@ The `ClusterScan` will have a `Failed` status. You will see a log entry similar
Trivy's scan duration may vary depending on the total images in your cluster
and the time to download the vulnerability database when needed.

By default, Zora sets a timeout of **10 minutes** for Trivy scan completion.
By default, Zora sets a timeout of **40 minutes** for Trivy scan completion.

To adjust this timeout, use the following Helm parameter:

```shell
--set scan.plugins.trivy.timeout=15m
--set scan.plugins.trivy.timeout=60m
```

Once this parameter is updated, the next scan will use the specified value.

0 comments on commit 765785c

Please sign in to comment.