CLI help message for --scanners flag does not match actual behavior for trivy k8s

[tjanson]

Description

The help message for the CLI arg --scanners reads as follows:

 --scanners string         comma-separated list of what security issues to detect (vuln,config,secret,license) (default "vuln,config,secret,rbac")

I.e., the following should be valid values:

• rbac
• vuln,config

Neither works:

$ trivy k8s -n kube-system --report summary --scanners rbac all >/dev/null
2023-11-06T16:12:09.215+0100    FATAL   invalid argument "rbac" for "--scanners" flag: must be one of ["vuln" "config" "secret" "license"]
$ trivy k8s -n kube-system --report summary --scanners vuln,config all >/dev/null
2023-11-06T16:12:39.454+0100    FATAL   invalid argument "vuln,config" for "--scanners" flag: must be one of ["vuln" "config" "secret" "license"]

It seems --scanners only accepts single values, and it seems rbac is no longer (?) a valid value.

Desired Behavior

Adjust help message or accept args as described, whichever is desired.

Actual Behavior

see above

Reproduction Steps

$ trivy --version | head -1
Version: 0.47.0
$ trivy k8s --help | grep rbac
      --scanners string         comma-separated list of what security issues to detect (vuln,config,secret,license) (default "vuln,config,secret,rbac")
$ trivy k8s -n kube-system --report summary --scanners rbac all >/dev/null
2023-11-06T16:12:09.215+0100    FATAL   invalid argument "rbac" for "--scanners" flag: must be one of ["vuln" "config" "secret" "license"]
$ trivy k8s -n kube-system --report summary --scanners vuln,config all >/dev/null
2023-11-06T16:12:39.454+0100    FATAL   invalid argument "vuln,config" for "--scanners" flag: must be one of ["vuln" "config" "secret" "license"]

Target

Kubernetes

Scanner

see above

Operating System

macOS 14

Version

Version: 0.47.0
Vulnerability DB:
  Version: 2
  UpdatedAt: 2023-11-06 12:11:49.492717847 +0000 UTC
  NextUpdate: 2023-11-06 18:11:49.492717586 +0000 UTC
  DownloadedAt: 2023-11-06 12:48:52.892341 +0000 UTC
Policy Bundle:
  Digest: sha256:1df8ade71efc830877ca3b1130f83e0c6368e3a45b0d4c0f0418955501644054
  DownloadedAt: 2023-11-06 12:56:33.902378 +0000 UTC

Checklist

• Run trivy image --reset
• Read the troubleshooting

[nikpivkin]

Hi @tjanson !

Track #5538