Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUG: Extension doesn't pick up .trivyignore file #50

Closed
gmeans opened this issue Jan 31, 2024 · 3 comments · Fixed by #59
Closed

BUG: Extension doesn't pick up .trivyignore file #50

gmeans opened this issue Jan 31, 2024 · 3 comments · Fixed by #59

Comments

@gmeans
Copy link

gmeans commented Jan 31, 2024

The extension doesn't seem to find a .trivyignore file in the root of the workspace. If I run the extension with DEBUG enabled I don't see a mention that it found the .trivyignore.

image

However if I run the command in the terminal for the same location, it behaves as expected.

image

@invisibleninja06
Copy link

invisibleninja06 commented Feb 20, 2024

Just confirming that i also am experiencing the same behavior.
trivy 0.49.1
vs code 1.86.2

No mention of my .trivyignore file in the debug logs

@maritiren
Copy link

I am experiencing the same. I am using a workspace of several repos where each has a trivyignore file.

version 0.52.2

No mentions of trivyignore here either.

@acdha
Copy link

acdha commented Jul 11, 2024

We use things like Terraform modules which have embedded examples which Trivy will flag as security issues even though they're not used or referenced by our code in any way. Our CLI usage uses a trivy.yaml file (along with a .trivyignore file) which I was hoping to be able to configure the extension to use as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants