Repository navigation
Is it possible to select the node where the Trivy scan will be executed ? #3046
Description
Your Question
To avoid pulling the image from an external source and to use the local registry on the node, I would like to be able to select the node where the scan will be executed.
I haven't found a way to add a nodeSelector to the scan, is there a solution to achieve this?
Activity
J12934 commentedon May 20, 2025
Hi, yes that is generally possible.
Not on a per scan basis, but you can configure a nodeSelector when installing the ScanType.
Search for
scanner.nodeSelector, on the trivy scantype docs: https://www.securecodebox.io/docs/scanners/trivy#valuesIf you need the ability to specify it scan basis this would need to be added to the scan custom resource.
Thats something that we would want to add but I dn't think anybody from the core team would have time to develop this in the next time, but pull requests to add it would be welcome.