Ask Trivy to report MEDIUM and HIGH issues as well

RADAR-base · Jan 6, 2025 · 476e83d · 476e83d
1 parent f0512b5
commit 476e83d
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -28,7 +28,7 @@ repos:
   - id: terraform_tflint
   - id: terraform_trivy
     args:
-    - --args=--severity CRITICAL
+    - --args=--severity MEDIUM,HIGH,CRITICAL
     - --args=--skip-dirs="*/.terraform"
     - --args=--tf-exclude-downloaded-modules
   - id: terraform_checkov

diff --git a/config/msk.tf b/config/msk.tf
@@ -74,6 +74,8 @@ zookeeper.session.timeout.ms=18000
 PROPERTIES
 }
 
+#trivy:ignore:AVD-AWS-0074 Temporarly skip these checks
+#trivy:ignore:AVD-AWS-0179 Temporarly skip these checks
 resource "aws_msk_cluster" "msk_cluster" {
   count = var.enable_msk ? 1 : 0
 

diff --git a/config/rds.tf b/config/rds.tf
@@ -36,6 +36,9 @@ resource "aws_security_group" "rds_access" {
 
 }
 
+#trivy:ignore:AVD-AWS-0077 Temporarly skip these checks
+#trivy:ignore:AVD-AWS-0177 Temporarly skip these checks
+#trivy:ignore:AVD-AWS-0176 Temporarly skip these checks
 resource "aws_db_instance" "radar_postgres" {
   count = var.enable_rds ? 1 : 0