mirror of
https://github.com/projectatomic/atomic.git
synced 2026-02-06 12:45:57 +01:00
cca4d0e5ae
When conducting a compliance scan, we do not want to check CVES as that is done by the default scan.
15 lines
537 B
Plaintext
15 lines
537 B
Plaintext
type: scanner
|
|
scanner_name: openscap
|
|
image_name: openscap
|
|
default_scan: cve
|
|
scans: [
|
|
{ name: cve,
|
|
args: ['oscapd-evaluate', 'scan', '--no-standard-compliance', '--targets', 'chroots-in-dir:///scanin', '--output', '/scanout'],
|
|
description: "Performs a CVE scan based on known CVE data"},
|
|
{ name: standards_compliance,
|
|
args: ['oscapd-evaluate', 'scan', '--targets', 'chroots-in-dir:///scanin', '--output', '/scanout', '--no-cve-scan'],
|
|
description: "Performs a standard scan"
|
|
}
|
|
]
|
|
|