feat(misconf): Support --ignore-policy in config scans (#5359)

Signed-off-by: Simar <simar@linux.com>
This commit is contained in:
simar7
2023-10-23 01:32:08 -06:00
committed by GitHub
parent 05b3c86a14
commit 01c98d1516
5 changed files with 93 additions and 10 deletions

View File

@@ -24,6 +24,7 @@ trivy config [flags] DIR
--helm-set-string strings specify Helm string values on the command line (can specify multiple or separate values with commas: key1=val1,key2=val2)
--helm-values strings specify paths to override the Helm values.yaml files
-h, --help help for config
--ignore-policy string specify the Rego file path to evaluate each vulnerability
--ignorefile string specify .trivyignore file (default ".trivyignore")
--include-non-failures include successes and exceptions, available with '--scanners config'
--k8s-version string specify k8s version to validate outdated api by it (example: 1.21.0)