Trivy dockerdile misconfig database update.

[xdiptan]

Question

On latest version of trivy , it's respecting inbuild as well as custom rego rule.
Why so?
We can avoid by setting up by adding mosconfig ID on .trivyignore or by adding filter.rego having rule like starts like AVD*.

We are seeing dockerfile list of misconfig Id(s). but I am not sure if trivy have any rule that mosconfig ID will always start with AVD*
Please help me find a way so that trivy only respect custom rule.
If that not possible, can we have information about the rule of defining dockerfile mosconfig ID ?

Target

Container Image

Scanner

Misconfiguration

Output Format

JSON

Mode

Standalone

Operating System

Linux

Version

It's 0.64.0

[simar7]

I'm not able to understand what your question is - can you share with examples what you are trying to do?

[nikpivkin]

Hi @xdiptan !

Do you want to ignore all built-in rules and leave only custom ones? If so, you can use the following ignore file:

package trivy

import rego.v1

# disable all built-in checks
ignore if not startswith(input.ID, "USR-")

More about how to ignore results: https://trivy.dev/latest/docs/configuration/filtering/#by-rego