feat(image): enable misconfig scanner by default

Include misconfiguration scanning alongside vuln and secret as a
default Trivy scanner for container image assessments.
This commit is contained in:
Andoni A. committed 2026-02-24 12:38:20 +01:00
1 parent 0caaddfb4a
commit bd9c4d696f
2 files changed
+4 -2

No files matched your search

+3 -1
View File
@@ -85,7 +85,9 @@ class ImageProvider(Provider):
self.images = images if images is not None else []
self.image_list_file = image_list_file
self.scanners = scanners if scanners is not None else ["vuln", "secret"]
self.scanners = (
scanners if scanners is not None else ["vuln", "secret", "misconfig"]
)
self.image_config_scanners = (
image_config_scanners if image_config_scanners is not None else []
)
+1 -1
View File
@@ -52,7 +52,7 @@ class TestImageProvider:
assert provider._type == "image"
assert provider.type == "image"
assert provider.images == ["alpine:3.18"]
assert provider.scanners == ["vuln", "secret"]
assert provider.scanners == ["vuln", "secret", "misconfig"]
assert provider.image_config_scanners == []
assert provider.trivy_severity == []
assert provider.ignore_unfixed is False