trivy
trivy copied to clipboard
BREAKING(report): Drop support for `EXCEPTIONS` from results
It's reasonable to drop support for Exceptions since:
- No other scanner uses it today. So the concept of Exceptions only exists in misconfiguration scanning. I believe the original concept originated from conftest but we have diverged quite a bit from that now in Trivy.
- The fact that it isn't very useful once we start to hide misconfigurations, if they are ignored.
~It will obviously be a breaking change that we will need to announce.~
Relevant discussion https://github.com/aquasecurity/trivy/discussions/7474
Originally posted by @simar7 in https://github.com/aquasecurity/trivy/pull/7171#discussion_r1680555960