Commit 2f3c471c authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

docs: add Trivy scan badges

parent d324dc9e
Loading
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -106,7 +106,7 @@ Depending on the security tools you launch, and their configuration, you may hav
| `sonarqube-sinceleakperiod` / `DEFECTDOJO_SONARQUBE_SINCELEAKPERIOD`     | determines if delta analysis is activated                                                                                              | false                                                                                      |
| `sonarqube-nosecurityhotspot` / `DEFECTDOJO_SONARQUBE_NOSECURITYHOTSPOT` | if true, disable hotspots processing                                                                                                   | true                                                                                       |
| `DEFECTDOJO_SONARQUBE_ALLBUGS `                                          | true if all bugs are returned, false if only vulnerabilities are returned                                                              | false                                                                                      |
| `base-image` / `DEFECTDOJO_BASE_IMAGE`                                   | Alpine base image                                                                                                                      | `registry.hub.docker.com/library/node:alpine3.11`                                          |
| `base-image` / `DEFECTDOJO_BASE_IMAGE`                                   | Alpine base image                                                                                                                      | `registry.hub.docker.com/library/node:alpine3.11`                                          <br/>[![Trivy Badge](https://to-be-continuous.gitlab.io/doc/secu/trivy-badge-DEFECTDOJO_BASE_IMAGE.svg)](https://to-be-continuous.gitlab.io/doc/secu/trivy-DEFECTDOJO_BASE_IMAGE) |
| `smtp-server` / `DEFECTDOJO_SMTP_SERVER`                                 | name:port of SMTP server used for notifications                                                                                        | _none_ (email notifications disabled)                                                      |
| `notification-severities` / `DEFECTDOJO_NOTIFICATION_SEVERITIES`         | list of (comma separated) severities to be notified on                                                                                 | Critical,High                                                                              |
| `timezone` / `DEFECTDOJO_TIMEZONE`                                       | timezone used for naming engagements and setting engagements start and end                                                             | `Europe/Paris`                                                                             |