r/ArgoCD

Hey all!

I've been working on Argo-Trivy-Insights, an Argo CD UI extension that brings your Trivy security data right into the Argo CD interface. No more tab-switching between tools.

What it does:

• Per-Application View: a dedicated "Trivy Insights" tab on each Application Details page showing Trivy scan results for the whole Argo CD Application.
• Cluster-Wide Dashboard: aggregate Trivy scan results across all your applications from the sidebar
• Scan Reports: covers Vulnerabilities, Exposed Secrets, Configuration Audit, RBAC Assessment, SBOM, and Cluster Compliance Reports, plus an overview pulling it all together
• Deeplinks & Exports: share findings via link, export as CSV, or get your SBOM in CycloneDX JSON format

https://preview.redd.it/qdi2h0i3zcjh1.png?width=1747&format=png&auto=webp&s=f4b3185ad1b1b92de04d88c6f7174c257bb7aae5

It's still early development and I'd love to get some real-world testers and feedback. If you're running Trivy in your cluster and want to give it a spin, check it out here.

Hi everyone,

I'm trying to set up proper audit logging in ArgoCD. I need to track which specific user triggered a sync or deleted an application/resource.

What is the best way to extract or view these audit logs?
Are they available in argocd-server logs, K8s events, or do I need a specific log exporter setup?

Any examples or best practices would be greatly appreciated!