Nest/.trivy.yaml at main · OWASP/Nest · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
exit-code: 1

filesystem:
  skip-files:

ignorefile: /.trivyignore.yaml

pkg:
  include-dev-deps: true

report: all

scan:
  scanners:
    - misconfig
    - secret
    - vuln
  show-suppressed: true
  skip-dirs:
    - '**/__pycache__'
    - '**/.cache'
    - '**/.lighthouseci'
    - '**/.local'
    - '**/.mypy_cache'
    - '**/.next'
    - '**/.pnpm-store'
    - '**/.pytest_cache'
    - '**/.ruff_cache'
    - '**/.semgrep-cache'
    - '**/.terraform'
    - '**/.trivy-cache'
    - '**/.venv'
    - '**/coverage'
    - '**/node_modules'
    - '**/staticfiles'
  skip-files:
    - '**/.env'
    - '**/*.pem'
    - '**/private/**'

severity:
  - CRITICAL
  - HIGH
  - MEDIUM
  - UNKNOWN

timeout: 10m

vulnerability:
  ignore-unfixed: true