Can we get vuln-type filtering for licenses as well?

[mastacheata]

Discussed in #4991

^{Originally posted by mastacheata August 14, 2023}

Description

Hey there,

it would be great if the license scanner results could be filtered by type before outputting them.

I think the vuln-type filter would be especially useful to filter out OS packages.
The typical use case for trivy is not people building new Linux distributions and sharing them publicly, but people building and sharing applications that just so happen to run on a Linux system. In the later case, the operating system packages being GPL licensed is of no concern at all, but a library-type dependency with a viral license is extremely important to consider.

So far, the only option around that is to filter the results by specifying a custom template or filtering the json or text outputs using third party tools.

Thanks for considering this.

Target

Container Image

Scanner

License

[github-actions]

Please see https://aquasecurity.github.io/trivy/latest/community/contribute/issue/