Skip to content

feat(security): updated container image scanner plugin with Trivy/Grype integration (#2216) - #3943

Closed
kamath-a wants to merge 5 commits into
IBM:mainfrom
kamath-a:issue-2216-container-scanner-final
Closed

feat(security): updated container image scanner plugin with Trivy/Grype integration (#2216) #3943
kamath-a wants to merge 5 commits into
IBM:mainfrom
kamath-a:issue-2216-container-scanner-final

Conversation

@kamath-a

Copy link
Copy Markdown

🔗 Related Issue

Closes #2216


📝 Summary

Links to PR #3713, implements feedback given for the PR.

Changes made since last PR:

  • server.py: The external plugin MCP server — exposes MCP tools over StreamableHTTP/STDIO and mounts the dashboard routes
  • container_scanner/templates/ui.html: Self-contained dashboard (Tailwind + Alpine.js)
  • plugin_config.yaml: Declarative plugin registration (name, kind, hooks, mode, config)
  • container_scanner.py : defined payload and result types within the file
  • exec.py : now in the container_scanner folder instead of mcpgateway/utils

🏷️ Type of Change

  • Bug fix
  • Feature / Enhancement
  • Documentation
  • Refactor
  • Chore (deps, CI, tooling)
  • Other (describe below)

🧪 Verification

Check Command Status
Lint suite make lint pass
Unit tests make test pass
Coverage ≥ 80% make coverage 99%

✅ Checklist

  • Code formatted (make black isort pre-commit)
  • Tests added/updated for changes
  • Documentation updated (if applicable)
  • No secrets or credentials committed

📓 Notes (optional)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FEATURE][SECURITY]: Container vulnerability scanner - Trivy/Grype integration

1 participant