Slowing scan

[DanielCastronovo]

Description

Trivy is very slow than TFsec with same rules.

Desired Behavior

speed scan

Actual Behavior

We use Trivy with Atlantis, and for a PR with multiples ressources on TF, the trivy scan is slow

Reproduction Steps

1. trivy config --skip-dirs "**/.terraform" --exit-code 0 --severity "CRITICAL" --report summary .
2.
3.
...

Target

Filesystem

Scanner

Misconfiguration

Output Format

Table

Mode

Standalone

Debug Output

52,10s user 3,32s system 92% cpu 59,629 total

Operating System

Linux

Version

0.51.0

Checklist

• Run trivy image --reset
• Read the troubleshooting

[simar7]

Can you give us an input that we can use to reproduce this? Without any additional info, it's hard for us to know where the slowdown (if-any) is.

[DanielCastronovo]

in my context, this is a big module terraform (submodules of AWS official modules), that create a set of a multiples resources.
So, use Trivy to scan a big project is slower than tfsec, because tfsec only scan terraform code by design.

[simar7]

Sure. As you mentioned Trivy scans for other things in addition to Terraform, it makes sense for it to take longer. But like I said earlier, without having a reproducible example it's hard for me to say why it's slower, if at all. Having said that, do you still need help?