Skip to content

Fix Trivy input handling#44

Open
lelia wants to merge 3 commits intomainfrom
lelia/fix-dockerfile-discovery
Open

Fix Trivy input handling#44
lelia wants to merge 3 commits intomainfrom
lelia/fix-dockerfile-discovery

Conversation

@lelia
Copy link
Contributor

@lelia lelia commented Mar 6, 2026

Summary

Fixes two config-handling issues that can impact Trivy behavior in GitHub Actions, plus tests to provide better coverage.

Changes

  • Fixed the way that string booleans like 'false' were being treated in Python as truthy, causing vuln scans to run when they should have been disabled
  • Updated config merge logic to ignore empty-string overrides when non-empty value already exists
  • Added regression tests to cover multiple configuration options used by Trivy

lelia added 3 commits March 6, 2026 15:03
Signed-off-by: lelia <lelia@socket.dev>
Signed-off-by: lelia <lelia@socket.dev>
Signed-off-by: lelia <lelia@socket.dev>
@lelia lelia requested a review from a team as a code owner March 6, 2026 20:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant