apiVersion: execution.securecodebox.io/v1
kind: ScanType
metadata:
  name: trivy-k8s
spec:
  extractResults:
    location: /home/securecodebox/trivy-results.json
    type: trivy-json
  jobTemplate:
    spec:
      backoffLimit: 3
      template:
        spec:
          containers:
            - command:
                - trivy
                - k8s
          serviceAccountName : <some-account-used-to-query-the-k8s-api>

apiVersion: "execution.securecodebox.io/v1"
kind: Scan
metadata:
  name: "rbac-trivy-k8s"
spec:
  scanType: "trivy-k8s"
  parameters:
    - "--security-checks=rbac"
    - "all"
    - "--report=all"
    - "--format=json"
    - "--output=/home/securecodebox/trivy-results.json"