trivy-operator 2.5.0 Helm chart

Name: trivy-operator Helm chart 2.5.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

devopstales

Scored 14 Sept 2026

This chart deploys an operator that default every 5 minutes execute a scan script. It will get image list from all namespaces with the label `trivy-scan=true`, and then scan this images with trivy, finally we will get metrics on `http://[pod-ip]:9115/metrics`

Version 2.5.0 1 year agodeploys tag 2.5 1Artifact Hub

trivy-operator 2.5.0 deploys 1 container image: devopstales/trivy-operator. Across them, 422 findings — 2 critical, 15 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2023-38545 in curl 7.87.0-r1, fixed in 8.4.0-r0. Chart.yaml declares kubeVersion >=1.19.x-0; rendered for Kubernetes 1.19.0.

Radar Score

5,59821587318

422 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
devopstales/trivy-operator	2.5	21587318	5,598

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

15 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2025-15467	openssl@3.0.7-r2	3.0.19-r0
High	PYSEC-2024-24	aiohttp@3.8.3	3.9.2
High	ALPINE-CVE-2024-6119	openssl@3.0.7-r2	3.0.15-r0
High	ALPINE-CVE-2023-38039	curl@7.87.0-r1	8.3.0-r0
High	ALPINE-CVE-2023-0286	openssl@3.0.7-r2	3.0.8-r0
High	GHSA-x4qr-2fvf-3mr5	cryptography@39.0.0	39.0.1
High	ALPINE-CVE-2024-2398	curl@7.87.0-r1	8.7.1-r0
High	ALPINE-CVE-2023-2650	openssl@3.0.7-r2	3.0.9-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.3.0	0.17.0
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v23.0.0-rc.1+incompatible	23.0.15
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.4.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.4.0	0.23.0
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.3	1.1.12
High	ALPINE-CVE-2024-2511	openssl@3.0.7-r2	3.0.12-r5
High	ALPINE-CVE-2022-4450	openssl@3.0.7-r2	3.0.8-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.5.0latest	1 year ago	2.5	21587318	5,598

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/devopstales/trivy-operator.svg)](https://charts.stackradar.io/charts/devopstales/trivy-operator)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.