From 441ded440d1368b19ece8dbcd1db23a5c49ddc89 Mon Sep 17 00:00:00 2001 From: nikpivkin Date: Thu, 9 Jan 2025 14:09:49 +0600 Subject: [PATCH] update docs Signed-off-by: nikpivkin --- docs/docs/scanner/misconfiguration/index.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/docs/docs/scanner/misconfiguration/index.md b/docs/docs/scanner/misconfiguration/index.md index 295ebe6fd930..4cd175cf58c3 100644 --- a/docs/docs/scanner/misconfiguration/index.md +++ b/docs/docs/scanner/misconfiguration/index.md @@ -503,6 +503,22 @@ Resources: BucketName: test-bucket ``` +!!!note + Ignore rules for Helm files should be placed before the YAML object, since only it contains the location data needed for ignoring. + +Example for Helm: +```yaml + serviceAccountName: "testchart.serviceAccountName" + containers: + # trivy:ignore:KSV018 + - name: "testchart" + securityContext: + runAsUser: 1000 + runAsGroup: 3000 + image: "your-repository/your-image:your-tag" + imagePullPolicy: "Always" +``` + #### Expiration Date You can specify the expiration date of the ignore rule in `yyyy-mm-dd` format. This is a useful feature when you want to make sure that an ignored issue is not forgotten and worth revisiting in the future. For example: