localops-copilot/trivy.yaml at main · Xio-Shark/localops-copilot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
# Trivy configuration file
# https://aquasecurity.github.io/trivy/v0.59/docs/configuration/

# Global options
cache-dir: ~/.cache/trivy
quiet: false

# Scan configuration
scan:
  scanners:
    - vuln
    - misconfig
    - secret
  skip-dirs:
    - apps/web/node_modules
    - apps/web/.next
    - "**/__pycache__"
    - "**/.venv"
    - "**/venv"
    - "**/.pytest_cache"
    - "**/.ruff_cache"
  skip-files:
    - "**/*.pyc"
    - "**/*.pyo"

# Vulnerability database
vulnerability:
  type:
    - os
    - library
  severity:
    - HIGH
    - CRITICAL
  ignore-unfixed: true

# Secret detection
secret:
  enabled: true

# Report configuration
report:
  format: table
  output: stdout
  severity: HIGH,CRITICAL