starrocks/trivy.yaml

19 lines
396 B
YAML

severity:
- HIGH
- CRITICAL
scan:
skip-dirs:
# ignore broker's cve
- apache_hdfs_broker/
skip-files:
# hdfs required
- "**/hadoop-client-runtime-3.4.1.jar"
# kudu required
- "**/kudu-client-1.17.1.jar"
# paimon required
- "**/paimon-bundle-1.0.1.jar"
# aws sdk bundle
- "**/bundle-2.29.52.jar"
# spark core
- "**/spark-core_2.12-3.5.5.jar"