You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/guide/scanner/misconfiguration/config/config.md
-124Lines changed: 0 additions & 124 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -343,127 +343,3 @@ You can use wildcards in the `ws` (workspace) and `ignore` sections of the ignor
343
343
```
344
344
345
345
This example ignores all checks starting with `aws-s3-` for workspaces matching the pattern `dev-*`.
346
-
347
-
### Expiration Date
348
-
349
-
You can specify the expiration date of the ignore rule in `yyyy-mm-dd` format. This is a useful feature when you want to make sure that an ignored issue is not forgotten and worth revisiting in the future. For example:
The `aws-ec2-no-public-ingress-sgr` check will be ignored only for the `aws_security_group_rule` resource with port number `5432`. It is important to note that the ignore rule should not enclose the attribute value in quotes, despite the fact that the port is represented as a string.
382
-
383
-
If you want to ignore multiple resources on different attributes, you can specify multiple ignore rules:
Issues in third-party modules cannot be ignored using the method described above, because you may not have access to modify the module source code. In such a situation you can add ignore rules above the module block, for example:
435
-
436
-
```tf
437
-
#trivy:ignore:aws-s3-enable-logging
438
-
module "s3_bucket" {
439
-
source = "terraform-aws-modules/s3-bucket/aws"
440
-
441
-
bucket = "my-s3-bucket"
442
-
}
443
-
```
444
-
445
-
An example of ignoring checks for a specific bucket in a module:
446
-
```tf
447
-
locals {
448
-
bucket = ["test1", "test2"]
449
-
}
450
-
451
-
#trivy:ignore:*[bucket=test1]
452
-
module "s3_bucket" {
453
-
for_each = toset(local.bucket)
454
-
source = "terraform-aws-modules/s3-bucket/aws"
455
-
bucket = each.value
456
-
}
457
-
```
458
-
459
-
#### Support for Wildcards
460
-
461
-
You can use wildcards in the `ws` (workspace) and `ignore` sections of the ignore rules.
462
-
463
-
```tf
464
-
# trivy:ignore:aws-s3-*:ws:dev-*
465
-
```
466
-
467
-
This example ignores all checks starting with `aws-s3-` for workspaces matching the pattern `dev-*`.
0 commit comments