Skip to content

Commit 12ce2ab

Browse files
committed
ignore AVD-DS-0026 in trivy scan
Ignore AVD-DS-0026 (missing HEALTHCHECK in Dockerfile) reported in `files/Dockerfile`, which is used to build `devenv` service container image. `devenv` service container is used to run an interactive shell and having `HEALTHCHECK` in such a service doesn't make sense.
1 parent 11376a5 commit 12ce2ab

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

.github/workflows/security-scan.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ jobs:
2424
scan-type: fs
2525
scan-ref: ./php-agent
2626
trivy-config: ./php-agent/trivy.yaml
27+
trivyignores: ./php-agent/.trivyignore
2728
format: table
2829
exit-code: 1
2930

@@ -35,6 +36,7 @@ jobs:
3536
scan-type: fs
3637
scan-ref: ./php-agent
3738
trivy-config: ./php-agent/trivy.yaml
39+
trivyignores: ./php-agent/.trivyignore
3840
format: sarif
3941
output: trivy-results.sarif
4042

.trivyignore

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Ignore missing HEALTHCHECK in Dockerfile - devenv service from files/Dockerfile doesn't need it:
2+
AVD-DS-0026

0 commit comments

Comments
 (0)