In-line issue suppression within Infrastructure as Code material

[huornlmj]

As a user I would like to be able to place checker suppression within my IaC code so that I can selectively accept issues. Most security tools allow for a number of suppression methods, e.g. exclude a file, disable a checker by ID, and finally put an inline comment with something like #nosec to skip the line. Trivy doesn't appear to have this. In fact it only seems to allow for complete file exclusion which is too far the other direction.

[knqyf263]

#trivy:ignore: should work. Are you talking about something else?
#2961

[itaysk]

BTW which language you need it for?

[huornlmj]

@itaysk K8s YAML object files, but pretty any IaC material Trivy covers.

[creste]

I also need #trivy:ignore:... to work with IaC, specifically k8s yaml files used as templates in helm charts.