Prometheus exports for all Scans

[henrysachs]

Hi There,

is it planned to export all of the metrics from the Reports so Prometheus could scrape them? I imagined a nice Grafana Dashboard for all of these or are these Informations considered to confidential to export? Reasoning behind this is that i would like to have a way to report critical containers back to the team building them in a large cluster context where not everyone has access to the k8s cluster itself.

[jeremeb]

I used the https://github.com/kaidotdev/kube-trivy-exporter. It is working good so far.

I then used this dashboard https://grafana.com/grafana/dashboards/12331, and this one https://grafana.com/grafana/dashboards/12330.

It seems to be working good so far.

[henrysachs]

so i just had a look at it and it isn't quite what i was searching for. I was looking for an exporter of the custom ressources. Your linked exporter runs trivy scans again which is a waste of hardware ressources if I'm already doing the starboard scans isn't it?

[stone-z]

For others finding this thread, we also would like to get prometheus metrics from Starboard, so have put together an exporter for that purpose.

There's additional discussion in this other thread including the problem of having such high-cardinality metrics. Ours currently exposes both summary and individual CVE metrics but we're open to making that configurable if others would like to use it differently.