You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After searching for a while, looking why trivy was not reporting on some test-insecure terraform files. I realized that it was not reporting them since they were misconfigurations and not vulnerabilities (the default value). A few rabit holes and blatant guessing later and I found that I apparently could use the environment variable 'GDN_TRIVY_SCANNERS'.
Please add this to the documentation to avoid others also having to pass this ordeal.
Acceptable values for the variable are: vuln, misconfig and secret. E.g. below:
GDN_TRIVY_SCANNERS: 'vuln,misconfig,secret'
Thank you in advance.
The text was updated successfully, but these errors were encountered:
After searching for a while, looking why trivy was not reporting on some test-insecure terraform files. I realized that it was not reporting them since they were misconfigurations and not vulnerabilities (the default value). A few rabit holes and blatant guessing later and I found that I apparently could use the environment variable 'GDN_TRIVY_SCANNERS'.
Please add this to the documentation to avoid others also having to pass this ordeal.
Acceptable values for the variable are: vuln, misconfig and secret. E.g. below:
GDN_TRIVY_SCANNERS: 'vuln,misconfig,secret'
Thank you in advance.
The text was updated successfully, but these errors were encountered: