mirror of
https://github.com/project-zot/zot.git
synced 2026-06-15 11:37:56 +08:00
Andrei Aaron
451e7b8e47
And default it to ["auto"] when unset, with an info log from applyDefaultValues. Refactor CVE NewScanner to take *CVEConfig instead of separate DB repository strings so the full Trivy block is available to the scanner. Extend CLI and search tests for the new field and logged config; document CVE/Trivy in examples/README and add examples/config-cve-trivy.json. Signed-off-by: Andrei Aaron <andreifdaaron@gmail.com>
27 lines
507 B
JSON
27 lines
507 B
JSON
{
|
|
"distSpecVersion": "1.1.1",
|
|
"storage": {
|
|
"rootDirectory": "/tmp/zot"
|
|
},
|
|
"http": {
|
|
"address": "127.0.0.1",
|
|
"port": "8080"
|
|
},
|
|
"log": {
|
|
"level": "debug"
|
|
},
|
|
"extensions": {
|
|
"search": {
|
|
"enable": true,
|
|
"cve": {
|
|
"updateInterval": "24h",
|
|
"trivy": {
|
|
"dbRepository": "ghcr.io/aquasecurity/trivy-db",
|
|
"javaDBRepository": "ghcr.io/aquasecurity/trivy-java-db",
|
|
"vulnSeveritySources": ["auto"]
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|