mirror of
https://github.com/goharbor/harbor.git
synced 2024-09-13 06:28:19 +02:00
b93092e012
Add trivy tls cert files Add tivey tls env and config enhance gencert Signed-off-by: DQ <dengq@vmware.com>
20 lines
823 B
Django/Jinja
20 lines
823 B
Django/Jinja
SCANNER_LOG_LEVEL={{log_level}}
|
|
SCANNER_STORE_REDIS_URL={{trivy_redis_url}}
|
|
SCANNER_STORE_REDIS_NAMESPACE=harbor.scanner.trivy:store
|
|
SCANNER_JOB_QUEUE_REDIS_URL={{trivy_redis_url}}
|
|
SCANNER_JOB_QUEUE_REDIS_NAMESPACE=harbor.scanner.trivy:job-queue
|
|
SCANNER_TRIVY_CACHE_DIR=/home/scanner/.cache/trivy
|
|
SCANNER_TRIVY_REPORTS_DIR=/home/scanner/.cache/reports
|
|
SCANNER_TRIVY_VULN_TYPE=os,library
|
|
SCANNER_TRIVY_SEVERITY=UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL
|
|
SCANNER_TRIVY_IGNORE_UNFIXED=false
|
|
SCANNER_TRIVY_GITHUB_TOKEN={{trivy_github_token}}
|
|
HTTP_PROXY={{trivy_http_proxy}}
|
|
HTTPS_PROXY={{trivy_https_proxy}}
|
|
NO_PROXY={{trivy_no_proxy}}
|
|
{%if internal_tls.enabled %}
|
|
SCANNER_API_SERVER_ADDR=:8443
|
|
SCANNER_API_SERVER_TLS_KEY=/etc/harbor/ssl/trivy_adapter.key
|
|
SCANNER_API_SERVER_TLS_CERTIFICATE=/etc/harbor/ssl/trivy_adapter.crt
|
|
{% endif %}
|