Ignore unfixed CVEs from scanner report

Signed-off-by: Tamal Saha <tamal@appscode.com>
kubeops · Jun 26, 2024 · d102cf2 · d102cf2
1 parent 8039d06
commit d102cf2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/backend/scanner.go b/pkg/backend/scanner.go
@@ -165,6 +165,7 @@ func scan(img string) (*trivy.SingleReport, error) {
 		img,
 		"--security-checks", "vuln",
 		"--format", "json",
+		"--ignore-unfixed",
 		// "--quiet",
 	}
 	out, err := sh.Command("trivy", args...).Output()