diff --git a/harbor-helm/templates/trivy/trivy-sts.yaml b/harbor-helm/templates/trivy/trivy-sts.yaml index ebbf6636..7f38c681 100644 --- a/harbor-helm/templates/trivy/trivy-sts.yaml +++ b/harbor-helm/templates/trivy/trivy-sts.yaml @@ -30,6 +30,10 @@ spec: {{ toYaml .Values.trivy.podAnnotations | indent 8 }} {{- end }} spec: + securityContext: + runAsNonRoot: true + runAsUser: 10000 + fsGroup: 10000 automountServiceAccountToken: false containers: - name: trivy diff --git a/harbor-helm/values.yaml b/harbor-helm/values.yaml index 56124f25..94bc5359 100644 --- a/harbor-helm/values.yaml +++ b/harbor-helm/values.yaml @@ -534,9 +534,9 @@ trivy: enabled: false image: # repository the repository for Trivy adapter image - repository: registry.suse.de/devel/caps/registry/containers/registry/harbor-trivy-adapter + repository: goharbor/trivy-adapter-photon # tag the tag for Trivy adapter image - tag: 2.0.0-rev1 + tag: v2.0.0 # replicas the number of Pod replicas replicas: 1 # debugMode the flag to enable Trivy debug mode with more verbose scanning log