diff --git a/pkg/extensions/config/config.go b/pkg/extensions/config/config.go
index 02c7597b..ac4a08c6 100644
--- a/pkg/extensions/config/config.go
+++ b/pkg/extensions/config/config.go
@@ -53,6 +53,8 @@ type SearchConfig struct {
 }
 
 type CVEConfig struct {
+	// Enable controls whether CVE scanning is active for search.
+	// If omitted, CVE scanning defaults to enabled when search is enabled.
 	Enable         *bool         `mapstructure:",omitempty" json:",omitempty"`
 	UpdateInterval time.Duration // should be 2 hours or more, if not specified default be kept as 2 hours
 	Trivy          *TrivyConfig