Commit d26a6659 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

feat(trivy): enable comprehensive priority

parent b7df8343

README.md

+1 −1
Original line number Diff line number Diff line
@@ -416,7 +416,7 @@ It is bound to the `package-test` stage, and uses the following variables: 
| `trivy-addr` / `DOCKER_TRIVY_ADDR`                                         | The Trivy server address (for client/server mode)                                                                      | _(none: standalone mode)_                                           |

| `trivy-security-level-threshold` / `DOCKER_TRIVY_SECURITY_LEVEL_THRESHOLD` | Severities of vulnerabilities to be displayed (comma separated values: `UNKNOWN`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`) | `UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL`                                  |

| `trivy-disabled` / `DOCKER_TRIVY_DISABLED`                                 | Set to `true` to disable Trivy analysis                                                                                | _(none)_                                                            |

| `trivy-args` / `DOCKER_TRIVY_ARGS`                                         | Additional [`trivy client` arguments](https://aquasecurity.github.io/trivy/v0.27.1/docs/references/cli/client/)        | `--ignore-unfixed --vuln-type os --exit-on-eol 1`                                   |

| `trivy-args` / `DOCKER_TRIVY_ARGS`                                         | Additional [`trivy client` arguments](https://aquasecurity.github.io/trivy/v0.27.1/docs/references/cli/client/)        | `--ignore-unfixed --vuln-type os --exit-on-eol 1 --detection-priority comprehensive`                                   |

| `trivy-db-repository` / `DOCKER_TRIVY_DB_REPOSITORY`                       | OCI repository to retrieve Trivy Database from                                                                         | _none_ (use Trivy default `ghcr.io/aquasecurity/trivy-db`)          |

| `trivy-java-db-repository` / `DOCKER_TRIVY_JAVA_DB_REPOSITORY`             | OCI repository to retrieve Trivy Java Database from                                                                    | _none_ (use Trivy default `ghcr.io/aquasecurity/trivy-java-db:1`)\_ |

kicker.json

+1 −1
Original line number Diff line number Diff line
@@ -198,7 +198,7 @@ 
        {

          "name": "DOCKER_TRIVY_ARGS",

          "description": "Additional `trivy client` arguments",

          "default": "--ignore-unfixed --vuln-type os --exit-on-eol 1",

          "default": "--ignore-unfixed --vuln-type os --exit-on-eol 1 --detection-priority comprehensive",

          "advanced": true

        },

        {

templates/gitlab-ci-docker.yml

+1 −1
Original line number Diff line number Diff line
@@ -172,7 +172,7 @@ spec: 
      default: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL

    trivy-args:

      description: Additional `trivy client` arguments

      default: --ignore-unfixed --vuln-type os --exit-on-eol 1

      default: --ignore-unfixed --vuln-type os --exit-on-eol 1 --detection-priority comprehensive

    trivy-db-repository:

      description: Custom OCI repository to retrieve Trivy Database from

      default: ''