.trivyignore.yaml

---
misconfigurations:
  - id: "AVD-KSV-0011"
  - id: "AVD-KSV-0012"
    paths:
      - "apps/vector/daemonset.yaml"
  - id: "AVD-KSV-0014"
    paths:
      - "apps/keycloak/deployment.yaml"
  - id: "AVD-KSV-0020"
    paths:
      - "apps/vector/daemonset.yaml"
      - "apps/**/postgres-deployment.yaml"
      - "apps/immich/components/pgvector/postgres-sts.yaml"
      - "apps/paperless-ngx/paperless-ngx-deployment.yaml"
      - "apps/keycloak/deployment.yaml" # errors if not running as 1000
  - id: "AVD-KSV-0021"
    paths:
      - "apps/vector/daemonset.yaml"
      - "apps/**/postgres-deployment.yaml"
      - "apps/paperless-ngx/paperless-ngx-deployment.yaml"
      - "apps/immich/components/pgvector/postgres-sts.yaml"
      - "apps/keycloak/deployment.yaml" # errors if not running as 1000
  - id: "AVD-KSV-0023"
    paths:
      - "apps/vector/daemonset.yaml"
  - id: "AVD-KSV-0048"
    paths:
      - "infra/reloader/components/rbac/clusterrole.yaml"
      - "infra/flux/gotk-components.yaml"
  - id: "AVD-KSV-0049"
    paths:
      - "apps/gollum/rbac/leader_election_role.yaml"
      - "infra/external-secrets/components/resources/rbac-clusterroles.yaml"
      - "infra/flux/gotk-components.yaml"
  - id: "AVD-KSV-0041"
    paths:
      - "infra/external-secrets/components/resources/rbac-bindings.yaml"
      - "infra/reloader/components/rbac/clusterrole.yaml"
      - "infra/flux/gotk-components.yaml"
      - "apps/monitoring/kube-state-metrics/components/rbac/cluster-role.yaml"
  - id: "AVD-KSV-0046"
    paths:
      - "infra/flux/gotk-components.yaml"
  - id: "AVD-KSV-0109"
    paths:
      - "clusters/common/taskd/configmap-ca.yaml"
  - id: "AVD-KSV-0111"
    paths:
      - "infra/flux/gotk-components.yaml"
  - id: "AVD-KSV-0113"
    paths:
      - "apps/monitoring/prometheus-vault-token-syncer/rbac.yaml"
      - "cicd/ansible/rbac.yaml"
  - id: "AVD-KSV-0114"
    paths:
      - "infra/external-secrets/components/resources/rbac-bindings.yaml"
  - id: "AVD-KSV-01010"
    paths:
      - "**/taskwarrior-configmap.yaml" # false positive
      - "apps/mariadb-galera/components/tls-wsrep/cm-sst-cnf.yaml" # false positive