Allow skipping scan on deployments with 0 desired replicas

[abutransistor]

Description

Trivy currently scans all deployments regardless of desired replica count. It would be great if there was an option to skip / filter based on Replica spec; such that trivy kubernetes scan would skip if the desired replica count is 0.

Target

Kubernetes

Scanner

Vulnerability

[afdesk]

@abutransistor thanks for interest in Trivy k8s scan
could you share more details about this feature?
how you see it?

[simar7]

@afdesk is this possible via a custom rego check? It sounds like a good use case for it.

[afdesk]

@afdesk is this possible via a custom rego check? It sounds like a good use case for it.

it's definitely a good idea - to skip / filter deployments with 0 replicas - thanks @abutransistor
and yes, looks like REGO rule can help it
I'd check it