Pass more arguments to trivy

[aapjeisbaas]

Would it be an idea to have an ENV var that will be used to pass along with the trivy command? I would like to pass:

--security-checks vuln
--ignore-unfixed

What would make it a bit difficult is that some of the params need a specific location in the command

trivy --security-checks vuln image --ignore-unfixed --severity HIGH examples/python-fastapi:latest -d

Otherwise I would like ta have a "with" param to set ignore-unfixed and security-checks

[crazy-max]

We could have a args input. Would look like this:

      -
        name: Scan for vulnerabilities
        uses: crazy-max/ghaction-container-scan@v2
        with:
          image: user/app:latest
          args: |
            --security-checks vuln
            --ignore-unfixed

[bryan-rhm]

this would be great, I'm looking for --ignore-unfixed option, since currently this blocks pipelines even if vulnerability can't be fixed

[c-ameron]

Thanks so much for this action! It's super cool. In my case, this would be useful to pass --exit-code so I can fail the job if the scan picks up something.

[ziv-airis]

Hey, any chance this feature will be addressed soon?