How to get metric from trivy

[robrosillo]

I have configured Harbor v.2.2.0 to use Trivy like scanner, but the exporter does not have metrics available. Could it be possible to have it?.

Describe the solution you'd like
Exporter with trivy metrics

[ninjadq]

hi @robrosillo , we currently not expose Trivy related metrics.
But it can be added in future release. Could you provide more details? like what kind of metrics do you want?

[robrosillo]

Hi @ninjadq

These could be some metrics:

• Scanned complated
• Scanned errors
• Scanned total
• Scanned requested
• Scanend latency

How you see, it is more less the clair metrics

Regards
Roberto

[matgn]

Some information on vulnerabilities would be great !

Like :

• harbor_artifacts_vulnerabilities
  Or at least :
• harbor_project_vulnerabilities_total
  And :
• harbor_project_vulnerability_severity

[github-actions]

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

[qnetter]

This is a great idea, but not likely for the next release, which due to the end-of-year holidays on both sides of the ocean will be a bit shorter cycle than usual.

[irLinja]

Sometimes trivy stops scanning for no good reason.
There are 4 instances of trivy running, they are healthy and ready, trivy API is accessible and responding through port forward, but in harbor scanner reports unhealthy.

Would be great to have metrics for trivy health and the last scan time in harbor.