Hi everyone. I'm pretty new to this whole DevOps pipeline world, coming from a sysadmin background.
We've been trying out Aqua for container security, specifically the malware scanning in our CI. It's... not great. Our image build times have easily doubled, sometimes more. The pipeline just feels stuck when it hits that scan stage. We're on a tight budget, so maybe our nodes aren't super powerful, but this is becoming a real bottleneck.
I was wondering if anyone else has run into this? Are we just misconfiguring something? Or are there lighter-weight alternatives for a basic malware scan that won't crush our pipeline performance? Maybe something open-source? I've heard of Trivy, but not sure how it compares performance-wise.
Thanks for any advice you can have!