search

aquasecurity / fanal

Static Analysis Library for Containers
Apache License 2.0
199 stars 100 forks source link

disable secret scanning? #515

Closed zetaab closed 2 years ago

zetaab commented 2 years ago

It seems https://github.com/aquasecurity/fanal/blob/main/artifact/local/fs.go#L55 that secret scanning is always enabled and not possible to disable it? We are seeing that this is using quite much resources and would like to disable it. Is that possible?

with secret scanning our scan takes something like 10 minutes and eat all ram/cpu from the machine. Without secret scanner it takes 2-4 seconds.

knqyf263 commented 2 years ago

Please refer to this page. https://aquasecurity.github.io/trivy/v0.27.1/docs/secret/scanning/