Filter by image registry

[ybasket]

Hello!

I'm currently evaluating trivy-operator to secure our clusters regarding vulnerabilities in 3rd party container images, for example nginx. As we already regularly scan images we build ourselves, it would be great if we could exclude our internal AWS ECR registry from image scanning.
Rego could probably be used to ignore all vulnerabilities from these images, but that would still execute the scan and hence waste resources. Also namespace filters don't solve our use case as our teams can deploy a mix of 3rd party and self-built images in their namespaces.
Is there any way to filter by registry or image regex? And if not, would it be hard to add?

[chen-keinan]

@ybasket today you can exclude images from scanning by namespace or skip scanning by resource labels

[ybasket]

I'm aware of both options, but as described namespaces won't work and resource labelling could work, but would require careful labelling and effort.

Would it be hard to add filter by registry/regex on image? I could imagine us contributing this feature if that's reasonably easy to do for outsiders.

[chen-keinan]

I see, please raise an issue for it, and if you have time you can pick it up

[ybasket]

Done: #2002