From 80259c162cdf5faca71815a396af29fe5e5aea77 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Sat, 16 May 2026 15:22:20 +0300
Subject: f3s/prometheus: add trivy unresolved-alerts report generator
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds gen-trivy-unresolved-alerts.py which queries Prometheus
(/api/v1/rules + /api/v1/alerts) via kubectl exec and produces
TRIVY-UNRESOLVED-ALERTS.md. The generated *-ALERTS.md snapshots are
gitignored — they're regenerable point-in-time inventories.
---
 .gitignore | 1 +
 1 file changed, 1 insertion(+)

(limited to '.gitignore')

diff --git a/.gitignore b/.gitignore
index cec7064..de1c2fb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 Rexfile.lock
 dotfiles/gitsyncer/.gitsyncer-work/
 f3s/garage/secrets/
+f3s/prometheus/*-ALERTS.md
-- 
cgit v1.2.3