Report is not empty even if there are no findings #6349
Closed
kanton10062006
started this conversation in
Bugs
Replies: 1 comment
-
Hello @kanton10062006 Created #6351 for this task. Regards, Dmitriy |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Description
Hello,
With the most recent release, I've noticed that trivy report/output is not empty even if there are no findings when some particular findings are in place in .trivyignore.yaml.
The previous version did not have such behavior as expected.
Our CI/CD relies on this report, if something exists within the report CI proceeds with different logic.
It reproduces for vuln and license scanners.
Desired Behavior
Completely empty report:
Actual Behavior
Here is an example of the actual output:
Reproduction Steps
Target
Filesystem
Scanner
Vulnerability
Output Format
Table
Mode
Standalone
Debug Output
trivy fs -q --scanners vuln . --debug 2024-03-19T15:17:07.236+0100 INFO Loaded trivy.yaml package-lock.json (npm) Total: 0 (MEDIUM: 0, HIGH: 0, CRITICAL: 0)
Beta Was this translation helpful? Give feedback.
All reactions