wodby cluster vulnerabilities
List the cluster's vulnerabilities from every source
List the cluster's vulnerabilities from every source in one list: the security advisories Wodby tracks, the scans of a k3s cluster's server packages, managed node pools on an outdated image, the known vulnerabilities of the cluster's Kubernetes version, and the scans of the images Wodby's infrastructure apps run. Vulnerabilities the cluster is still exposed to come first, then the most severe. The action column names what fixes or mitigates one: update_kubernetes (cluster update-kubernetes-version), upgrade_infrastructure (cluster upgrade-infra), upgrade_infrastructure_apps (cluster upgrade-infra-apps), recycle_nodes (cluster recycle-nodes) or update_server_packages, which is done on the k3s server itself. -o vertical adds each vulnerability's public record. Wodby Cloud and serverless clusters return an empty list.
Usage
wodby cluster vulnerabilities CLUSTER_ID [flags]Aliases
vulnerability
Options
| Flag | Description | Default |
|---|---|---|
--components string |
Comma-separated components to list: operating_system, node_image, kubernetes, infrastructure_app; all when omitted | - |
-h, --help |
help for vulnerabilities | false |
--page int |
Page number | 0 |
--page-size int |
Page size | 0 |
--severities string |
Comma-separated severities to list, such as critical,high; all when omitted | - |
--unresolved |
Only vulnerabilities the cluster is still exposed to | false |
Options inherited from parent commands
| Flag | Description | Default |
|---|---|---|
--access-token string |
Access token | - |
--api-base-url string |
Public REST API base URL | https://apiv2.wodby.com/v1 |
--api-key string |
API key | - |
--ci-config-path string |
Path to CI config | /tmp/.wodby-ci.json |
-o, --output string |
Output format: table, vertical, or json | table |
--verbose |
Verbose output | false |