blumeops/docs
Erich Blume 2daf6291b7 Replace dead Prowler IaC mutelist with Trivy ignorefile shim
Prowler's IaC provider hardcodes self._mutelist = None and delegates
filtering to Trivy, but doesn't plumb --ignorefile through. The original
attempt with --mutelist-file silently no-op'd. Add a wrapper around
trivy in our image that injects --ignorefile $TRIVY_IGNOREFILE on `fs`
subcommands; switch the IaC cronjob to mount a Trivy-format
trivyignore.yaml and set the env var.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-28 09:50:31 -07:00
..
changelog.d Replace dead Prowler IaC mutelist with Trivy ignorefile shim 2026-04-28 09:50:31 -07:00
explanation Update docs for Caddy routing and direct WireGuard peering 2026-04-18 09:57:30 -07:00
how-to C0: split gandi-operations docs; add dns-acme-cleanup mise task 2026-04-27 09:48:46 -07:00
reference C0: split gandi-operations docs; add dns-acme-cleanup mise task 2026-04-27 09:48:46 -07:00
tutorials Review contributing tutorial: add last-reviewed, .ai.md fragment type, prek provenance 2026-04-21 08:53:41 -07:00
index.md
quartz.config.ts
quartz.layout.ts