scanner

type Options struct {
	// Namespace the namespace to run the scan Job in.
	Namespace string
	// ServiceAccountName the name of the Service Account to run the Pod controlled by the scan Job.
	ServiceAccountName string
	// ImageCredentials maps container images to Docker authentications credentials in case the images are pulled from private registries.
	ImageCredentials map[string]docker.Auth
	// ScanJobTimeout scan job timeout.
	ScanJobTimeout time.Duration
}

type VulnerabilityScanner interface {
	NewScanJob(workload kube.Object, spec corev1.PodSpec, options Options) (*batchv1.Job, *corev1.Secret, error)
	ParseVulnerabilityReport(imageRef string, logsReader io.ReadCloser) (v1alpha1.VulnerabilityReport, error)
}