Is it possible to somehow pass .trivyignore file to Trivy GH action?

[gasgithub]

I'd like to ignore some of the vulnerabilities same way as specifying .trivyignore does. Could this be somehow passed to action?

Regards

[krol3]

@gasgithub Good question! Currently the action is built using Dockerfile and the entrypoint.sh. https://github.com/aquasecurity/trivy-action/blob/master/Dockerfile

I think we could create a parameter to receive the CVE and create the .trivyignore.

Any thoughts @simar7

[simar7]

Yes, PRs are welcome

[timdittler]

I'd like to ignore some of the vulnerabilities same way as specifying .trivyignore does. Could this be somehow passed to action?

Just add a .trivyignore to your GITHUB_WORKSPACE (aka your repo and use checkout action). Trivy will pick it up automatically.

[achton]

Alternately, release 0.4.0 now has support for passing in a relative path to a .trivyignore file which will then be picked up by the action.