From bd9c4d696f5f17516523ffa779b0cd1d1c5a00f8 Mon Sep 17 00:00:00 2001 From: "Andoni A." <14891798+andoniaf@users.noreply.github.com> Date: Tue, 24 Feb 2026 12:38:20 +0100 Subject: [PATCH] feat(image): enable misconfig scanner by default Include misconfiguration scanning alongside vuln and secret as a default Trivy scanner for container image assessments. --- prowler/providers/image/image_provider.py | 4 +++- tests/providers/image/image_provider_test.py | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/prowler/providers/image/image_provider.py b/prowler/providers/image/image_provider.py index f6d63b4be2..95013cfa86 100644 --- a/prowler/providers/image/image_provider.py +++ b/prowler/providers/image/image_provider.py @@ -85,7 +85,9 @@ class ImageProvider(Provider): self.images = images if images is not None else [] self.image_list_file = image_list_file - self.scanners = scanners if scanners is not None else ["vuln", "secret"] + self.scanners = ( + scanners if scanners is not None else ["vuln", "secret", "misconfig"] + ) self.image_config_scanners = ( image_config_scanners if image_config_scanners is not None else [] ) diff --git a/tests/providers/image/image_provider_test.py b/tests/providers/image/image_provider_test.py index 758031b872..00eae1d249 100644 --- a/tests/providers/image/image_provider_test.py +++ b/tests/providers/image/image_provider_test.py @@ -52,7 +52,7 @@ class TestImageProvider: assert provider._type == "image" assert provider.type == "image" assert provider.images == ["alpine:3.18"] - assert provider.scanners == ["vuln", "secret"] + assert provider.scanners == ["vuln", "secret", "misconfig"] assert provider.image_config_scanners == [] assert provider.trivy_severity == [] assert provider.ignore_unfixed is False