A script to scan all images in the current Kubernetes cluster with Trivy (https://github.com/aquasecurity/trivy) for high & critical vulnerabilities.

scan_all_k8s_images.sh

#/bin/bash

if [ ! -f /usr/local/bin/trivy ]; then
    echo "Trivy not found! Please install it from https://github.com/aquasecurity/trivy"
fi

for image in `kubectl get pods --all-namespaces -o jsonpath="{..image}" |\
tr -s '[[:space:]]' '\n' |\
sort |\
uniq -c | awk '{print $2}'`; do trivy image  -s HIGH,CRITICAL $image; done