ignore trivy finding for public egress (#2919)

dcmcand · web-flow · commit ac8839102637 · 2025-02-07T16:06:23.000+01:00
diff --git a/src/_nebari/stages/infrastructure/template/aws/modules/network/main.tf b/src/_nebari/stages/infrastructure/template/aws/modules/network/main.tf
@@ -62,6 +62,7 @@ resource "aws_security_group" "main" {
     cidr_blocks = [var.vpc_cidr_block]
   }
 
+  #trivy:ignore:AVD-AWS-0104
   egress {
     description = "Allow all ports and protocols to exit the security group"
     from_port   = 0

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,7 @@ resource "aws_security_group" "main" {`
`62`	`62`	`cidr_blocks = [var.vpc_cidr_block]`
`63`	`63`	`}`
`64`	`64`
	`65`	`+ #trivy:ignore:AVD-AWS-0104`
`65`	`66`	`egress {`
`66`	`67`	`description = "Allow all ports and protocols to exit the security group"`
`67`	`68`	`from_port = 0`