Commit acebc922 authored by Guilhem Bonnefille's avatar Guilhem Bonnefille
Browse files

Merge branch 'docs/readme' into 'master' 

docs(README): update the README on defaults for the MAVEN_SBOM_OPTS variable

Closes #61

See merge request to-be-continuous/maven!89
parents 26f04360 f315135d

README.md

+1 −1
Original line number Diff line number Diff line
@@ -481,7 +481,7 @@ The template uses GitLab registries and authentication defaults. See the Docker 
| Input / Variable | Description              | Default value                                     |

| -------------------------------------- | ------------------------ | ------------------------------------------------- |

| `sbom-image` / `MAVEN_SBOM_IMAGE` | The image used to perform and complete the Security Bill of Materials | `registry.hub.docker.com/anchore/syft:debug` |

| `sbom-opts` / `MAVEN_SBOM_OPTS` | SBOM options to complete the Security Bill of Materials  | `--catalogers rpm-db-cataloger,alpmdb-cataloger,apkdb-cataloger,dpkgdb-cataloger,portage-catalogerE`          |

| `sbom-opts` / `MAVEN_SBOM_OPTS` | SBOM options to complete the Security Bill of Materials  | `--override-default-catalogers rpm-db-cataloger,alpm-db-cataloger,apk-db-cataloger,dpkg-db-cataloger,portage-cataloger,nix-store-cataloger,java`          |

| `trivy-security-level-threshold` / `MAVEN_TRIVY_SECURITY_LEVEL_THRESHOLD` | Security level which fails the `mvn-trivy` job | `UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL` |

| `trivy-image` / `MAVEN_TRIVY_IMAGE` | The image to perform container security scanning  | `registry.hub.docker.com/aquasec/trivy:latest` |

| `trivy-args` / `MAVEN_TRIVY_ARGS` | Arguments for the execution of Trivy | `--ignore-unfixed --vuln-type os` |