Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inconsistency between ignore-unfixed option in GitHub Action example and CLI documentation #382

Open
vferrenq opened this issue Aug 7, 2024 · 0 comments

Comments

@vferrenq
Copy link

vferrenq commented Aug 7, 2024

Hello Trivy team,

I've noticed an inconsistency between the example provided in the README for the Trivy GitHub Action and the official CLI documentation for trivy config.

In the GitHub Action example for scanning Infrastructure as Code (https://github.com/aquasecurity/trivy-action?tab=readme-ov-file#using-trivy-to-scan-infrastructure-as-code), the following option is used:

ignore-unfixed: true

However, in the official CLI documentation for trivy config (https://aquasecurity.github.io/trivy/v0.27.1/docs/references/cli/config/), the ignore-unfixed option is not listed as a supported option.
When attempting to use ignore-unfixed with trivy config in the CLI, it results in an error stating that the option is not supported.

Questions:

Is the ignore-unfixed option supposed to work with trivy config in the GitHub Action, despite not being supported in the CLI?
If it's not supposed to work, should the example in the README be updated to remove this option for IaC scans?
If it is supposed to work, could the CLI documentation be updated to reflect this?

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant