Skip to content

refactor(misconf): use Helm v4 SDK loaders instead of custom tar parsing #10603

Description

@nikpivkin

Trivy currently parses Helm chart archives manually (parser_tar.go). Switching to the Helm v4 SDK loaders (LoadArchive, LoadDir) offloads chart version detection to the SDK — which is a prerequisite for Charts v3 support.

Scope

  • Replace custom tar parsing in parser_tar.go with loader.LoadArchive
  • Convert the resulting *chart.Chart into Trivy's mapfs.FS for downstream scanning
  • Verify existing test coverage still passes

References

Metadata

Metadata

Assignees

No one assigned

    Labels

    scan/misconfigurationIssues relating to misconfiguration scanning

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions