Skip to content

feat: allow to remove fields from vulnerability reports#2860

Open
sathieu wants to merge 1 commit intoaquasecurity:mainfrom
sathieu:remove-fields-from-vulnreports
Open

feat: allow to remove fields from vulnerability reports#2860
sathieu wants to merge 1 commit intoaquasecurity:mainfrom
sathieu:remove-fields-from-vulnreports

Conversation

@sathieu
Copy link

@sathieu sathieu commented Jan 23, 2026

Description

This was extracted from #2854 (first commit).

Here is the first change to limit the problems of etcd max size reached (#757):

  • allow to remove some fields from the vulnerability report

Before:

  vulnerabilities:
  - fixedVersion: 0.45.0
    installedVersion: v0.43.0
    lastModifiedDate: "2025-12-11T19:36:41Z"
    links: []
    packagePURL: pkg:golang/golang.org/x/crypto@v0.43.0
    primaryLink: https://avd.aquasec.com/nvd/cve-2025-47914
    publishedDate: "2025-11-19T21:15:50Z"
    resource: golang.org/x/crypto
    score: 5.3
    severity: MEDIUM
    target: ""
    title: 'golang.org/x/crypto/ssh/agent: in golang.org/x/crypto/ssh/agent'
    vulnerabilityID: CVE-2025-47914

After (and trivy.additionalVulnerabilityReportFields=-Resource,-InstalledVersion,-FixedVersion,-PublishedDate,-LastModifiedDate,-Title,-PrimaryLink,-Score,-PURL):

  - fixedVersion: ""
    installedVersion: ""
    lastModifiedDate: ""
    publishedDate: ""
    resource: ""
    severity: MEDIUM
    target: ""
    title: ""
    vulnerabilityID: CVE-2025-47914

Related issues

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@sathieu sathieu force-pushed the remove-fields-from-vulnreports branch from fe0cf26 to 2385270 Compare February 13, 2026 07:36
@sathieu sathieu requested a review from afdesk as a code owner February 13, 2026 07:36
@sathieu
Copy link
Author

sathieu commented Feb 13, 2026

@simar7 @afdesk Please review and merge 🙏.

Next step in #2854

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Reduce the amount of vulnerability fields stored in the vulnerabilities report

1 participant