Add an option to skip the files greater than a particular size #7151
Replies: 2 comments 17 replies
-
|
Thanks for your idea. It makes sense, but as I commented here, we probably need the option for each scanner. We need to consider it carefully, like |
Beta Was this translation helpful? Give feedback.
-
|
Add function here: func AllAnalyzersTypes() []Type {
return append(lo.Keys(analyzers), lo.Keys(postAnalyzers)...)
}and run before disable analyzers: "gobinary"
"alma"
"fedora"
"node-pkg"
"alpine"
"apk"
"sbom"
"amazon"
"centos"
"oracle"
"rocky"
"cocoapods"
"rpmqa"
"conda-environment"
"dotnet-core"
"packages-props"
"gemspec"
"pipenv"
"rustbinary"
"license-file"
"redhat-content-manifest"
"executable"
"conda-pkg"
"sbt-lockfile"
"swift"
"debian"
"ubuntu-esm"
"dpkg-license"
"ubuntu"
"apk-repo"
"secret"
"mix-lock"
"pom"
"composer-vendor"
"os-release"
"rpm"
"redhat-dockerfile"
"bundler"
"cbl-mariner"
"redhat"
"conan-lock"
"jar"
"npm"
"pnpm"
"dpkg"
"helm"
"pubspec-lock"
"gomod"
"pip"
"cargo"
"azure-arm"
"dockerfile"
"terraform"
"gradle-lockfile"
"julia"
"yarn"
"composer"
"python-pkg"
"cloudformation"
"kubernetes"
"terraformplan-json"
"terraformplan-snapshot"
"nuget"
"poetry"
|
Beta Was this translation helpful? Give feedback.
-
|
I would generate the list in |
Beta Was this translation helpful? Give feedback.
-
|
It's not a problem. Created test code (as example) for docs.go: buf := bytes.NewBuffer([]byte(`
## Analyzers
Use the following types of analyzers for the [--file-patterns] or [--max-file-size] flags::
`))
buf.WriteString("```\n")
for _, t := range analyzer.AllAnalyzersTypes() {
buf.WriteString(string(t) + "\n")
}
buf.WriteString("```")
os.WriteFile("analyzers.md", buf.Bytes(), 0644)test (markdown will need to be worked out 😄): ➜ mage docs:generate
➜ cat analyzers.md
## Analyzers
Use the following types of analyzers for the [--file-patterns] or [--max-file-size] flags::
```
packages-props
node-pkg
rustbinary
license-file
debian
ubuntu-esm
apk-repo
conda-environment
composer-vendor
redhat
os-release
secret
redhat-content-manifest
executable
bundler
centos
sbom
cocoapods
amazon
dpkg-license
rpmqa
mix-lock
pom
gemspec
swift
alpine
cbl-mariner
fedora
oracle
alma
ubuntu
rpm
dotnet-core
gobinary
sbt-lockfile
pipenv
rocky
apk
redhat-dockerfile
conda-pkg
pubspec-lock
gomod
yarn
pip
cargo
dpkg
terraformplan-snapshot
kubernetes
terraform
terraformplan-json
conan-lock
nuget
julia
npm
dockerfile
python-pkg
pnpm
poetry
cloudformation
helm
gradle-lockfile
jar
composer
azure-arm
``` |
Beta Was this translation helpful? Give feedback.
-
|
Nice! Ideally, we should have "Description() string" in the Analyzer interface, and export it in the markdown. |
Beta Was this translation helpful? Give feedback.
-
|
Good idea! |
Beta Was this translation helpful? Give feedback.
-
|
So yesterday we had this issue trivy failed fatal error: runtime: out of memory. As there was 1 file of 4.6GB
|
Beta Was this translation helpful? Give feedback.
-
Description
So I am scanning lot of file systems in multiple environments and with following perquisite
with that I found a limitation with trivy where if the file size is more than 100MB trivy just times out without even giving the data for the files it has scanned. Hence the request to add the option to skip files greater than a particular size
Target
Filesystem
Scanner
Secret
Beta Was this translation helpful? Give feedback.
All reactions