trivy.yaml

# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at https://mozilla.org/MPL/2.0/.
#
# OpenCRVS is also distributed under the terms of the Civil Registration
# & Healthcare Disclaimer located at http://opencrvs.org/license.
#
# Copyright (C) The OpenCRVS Authors located at https://github.com/opencrvs/opencrvs-core/blob/master/AUTHORS.
exit-code: 1
severity:
  - HIGH
  - CRITICAL
scan:
  skip-dirs:
    - node_modules
    - app/node_modules
    - .secrets
    - data
    - development-environment
    - sequence-diagrams
    - usr/local/share/.cache/yarn/v6/
    - home/node/.cache/yarn/v6
  skip-files:
    - '**/*.dockerignore'
  scanners:
    - vuln
    - misconfig
ignorefile: .trivyignore.yaml
vulnerability:
  ignore-unfixed: true
db:
  repository: 'ghcr.io/opencrvs/trivy-db'
  java-repository: 'ghcr.io/opencrvs/trivy-java-db'

policies-bundle:
  repository: 'ghcr.io/opencrvs/trivy-checks'