jfrog / jfrog/jfrog-cli-security
jf docker scan with option to ignore all vulns got under a certain path
Open
@hadarshjfrog is already working on this.
Since Feb 3, 2025.
question
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Hi,
I would like to know if their is a way to ignore vulnerabilities found only under a certain path of a docker image.
Typically we have a docker image where we untar codeql-action release but this same image give us a lot of vulnerabilities at scan time since it produces impact pathes under this extracted path at jf docker scan moment.
We are looking for a way to exclude a path pattern of the image tarball, like:
/path/to/codeql
Thx for your help
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.