|
5 | 5 | [id="fetching-vulnerability-definitions_{context}"]
|
6 | 6 | = Fetching vulnerability definitions
|
7 | 7 |
|
8 |
| -//verify this info is still accurate |
9 | 8 | In online mode, Central fetches the vulnerability definitions every 5 minutes from a single feed.
|
10 |
| -This feed combines vulnerability definitions from upstream sources, and it refreshes every 3 hours. |
| 9 | +This feed combines vulnerability definitions from upstream sources, and it refreshes every 3 hours. The address of the feed is `\https://definitions.stackrox.io`. |
| 10 | + |
| 11 | +You can change the frequency of the default query from Central to the `definitions.stackrox.io` feed by setting the `ROX_SCANNER_VULN_UPDATE_INTERVAL` environment variable. Run the following command: |
11 | 12 |
|
12 |
| -* The address of the feed is `\https://definitions.stackrox.io`. |
13 |
| -* You can change the default query frequency for Central and the StackRox Scanner by setting the `ROX_SCANNER_VULN_UPDATE_INTERVAL` environment variable: |
14 |
| -+ |
15 | 13 | [source,terminal]
|
16 | 14 | ----
|
17 | 15 | $ oc -n stackrox set env deploy/central ROX_SCANNER_VULN_UPDATE_INTERVAL=<value> <1>
|
18 | 16 | ----
|
19 | 17 | <1> If you use Kubernetes, enter `kubectl` instead of `oc`.
|
20 | 18 |
|
21 |
| -Note the following guidance: |
| 19 | +This variable applies to the connection between Central and the `definitions.stackrox.io` feed. Both the StackRox Scanner and Scanner V4 use vulnerability data from Central that is obtained from this feed. The StackRox Scanner's config map still has an `updater.interval` parameter for configuring the scanner's updating frequency, but it no longer includes the `fetchFromCentral` parameter. |
22 | 20 |
|
23 |
| -* The StackRox Scanner's configuration map still has an `updater.interval` parameter for configuring the scanner's updating frequency, but it no longer includes the `fetchFromCentral` parameter. |
24 |
| -* Setting this environment variable is not supported for Scanner V4. |
| 21 | +For more information about the vulnerability sources that {product-title-short} uses, see "Vulnerability sources" in "{product-title} architecture". |
25 | 22 |
|
26 |
| -For more information about the vulnerability sources that {product-title-short} uses, see "Vulnerability sources" in "{product-title} architecture". |
| 23 | +//Future work when time permits: |
| 24 | +// Take instructions for changing the frequency of fetching definitions and put them into a procedure module. Call that module from the operating/examine-images-for-vulnerabilities.adoc module. |
0 commit comments