result

Documentation

Index

• Constants
• func Filter(ctx context.Context, report types.Report, opt FilterOption) error
• func FilterResult(ctx context.Context, result *types.Result, ignoreConf IgnoreConfig, ...) error
• type FilterOption
• type IgnoreConfig
• type IgnoreFinding
• type IgnoreFindings
  • func (f *IgnoreFindings) Filter()
  • func (f *IgnoreFindings) Match(path, id string) bool

Constants

const (
	// DefaultIgnoreFile is the file name to be evaluated
	DefaultIgnoreFile = ".trivyignore"
)

Functions

func Filter

func Filter(ctx context.Context, report types.Report, opt FilterOption) error

Filter filters out the report

func FilterResult

func FilterResult(ctx context.Context, result *types.Result, ignoreConf IgnoreConfig, opt FilterOption) error

FilterResult filters out the result

Types

type FilterOption

type FilterOption struct {
	Severities         []dbTypes.Severity
	IgnoreStatuses     []dbTypes.Status
	IncludeNonFailures bool
	IgnoreFile         string
	PolicyFile         string
	IgnoreLicenses     []string
	VEXPath            string
}

type IgnoreConfig

type IgnoreConfig struct {
	Vulnerabilities   IgnoreFindings `yaml:"vulnerabilities"`
	Misconfigurations IgnoreFindings `yaml:"misconfigurations"`
	Secrets           IgnoreFindings `yaml:"secrets"`
	Licenses          IgnoreFindings `yaml:"licenses"`
}

IgnoreConfig represents the structure of .trivyignore.yaml.

type IgnoreFinding

type IgnoreFinding struct {
	// ID is the identifier of the vulnerability, misconfiguration, secret, or license.
	// e.g. CVE-2019-8331, AVD-AWS-0175, etc.
	// required: true
	ID string `yaml:"id"`

	// Paths is the list of file paths to be ignored.
	// If Paths is not set, the ignore finding is applied to all files.
	// required: false
	Paths []string `yaml:"paths"`

	// ExpiredAt is the expiration date of the ignore finding.
	// If ExpiredAt is not set, the ignore finding is always valid.
	// required: false
	ExpiredAt time.Time `yaml:"expired_at"`

	// Statement describes the reason for ignoring the finding.
	// required: false
	Statement string `yaml:"statement"`
}

IgnoreFinding represents an item to be ignored.

type IgnoreFindings

type IgnoreFindings []IgnoreFinding

func (*IgnoreFindings) Filter

func (f *IgnoreFindings) Filter()

func (*IgnoreFindings) Match

func (f *IgnoreFindings) Match(path, id string) bool