Skip to content

Add environment variable GDN_TRIVY_SCANNERS to documentation #119

@tijnvdheuvel

Description

@tijnvdheuvel

After searching for a while, looking why trivy was not reporting on some test-insecure terraform files. I realized that it was not reporting them since they were misconfigurations and not vulnerabilities (the default value). A few rabit holes and blatant guessing later and I found that I apparently could use the environment variable 'GDN_TRIVY_SCANNERS'.

Please add this to the documentation to avoid others also having to pass this ordeal.

Acceptable values for the variable are: vuln, misconfig and secret. E.g. below:
GDN_TRIVY_SCANNERS: 'vuln,misconfig,secret'

Thank you in advance.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions