chore: expose skip-dir helm param (#786)

* chore: expose skip-dir helm param Signed-off-by: chenk <hen.keinan@gmail.com> * chore: expose skip-dir helm param Signed-off-by: chenk <hen.keinan@gmail.com> Signed-off-by: chenk <hen.keinan@gmail.com>
aquasecurity · Dec 13, 2022 · 9c102f5 · 9c102f5
1 parent a77a215
commit 9c102f5
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/deploy/helm/templates/config.yaml b/deploy/helm/templates/config.yaml
@@ -103,6 +103,9 @@ data:
   trivy.slow: {{ .Values.trivy.slow | quote }}
   trivy.dbRepository: {{ .Values.trivy.dbRepository | quote }}
   trivy.command: {{ .Values.trivy.command | quote }}
+  {{- if .Values.trivy.skipDirs }}
+  trivy.skipDirs: {{ .Values.trivy.skipDirs | quote }}
+  {{- end }}
   {{- if .Values.trivy.dbRepositoryInsecure }}
   trivy.dbRepositoryInsecure: {{ .Values.trivy.dbRepositoryInsecure | quote }}
   {{- end }}

diff --git a/deploy/helm/values.yaml b/deploy/helm/values.yaml
@@ -108,7 +108,7 @@ image:
 service:
   metricsPort: 80
 
-# Prometheus ServiceMonitor configuration -- to install the trivy operator with the ServiceMonitor 
+# Prometheus ServiceMonitor configuration -- to install the trivy operator with the ServiceMonitor
 # you must have Prometheus already installed and running
 serviceMonitor:
   # enabled determines whether a serviceMonitor should be deployed
@@ -247,6 +247,8 @@ trivy:
   # vulnerabilities reported by Trivy. Set to true to enable it.
   #
   ignoreUnfixed: false
+  # a comma separated list of directories for Trivy to skip
+  skipDirs:
 
   # offlineScan is the flag to enable the offline scan functionality in Trivy
   # This will prevent outgoing HTTP requests, e.g. to search.maven.org