ci: exclude downloaded modules for terraform scanning

dvsa · May 16, 2024 · ed5a403 · ed5a403
1 parent f2ef62c
commit ed5a403
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/security-terraform.yaml b/.github/workflows/security-terraform.yaml
@@ -6,6 +6,9 @@ on:
     # Weekly on Monday at 00:00 UTC
     - cron: 0 0 * * 1
 
+env:
+  TRIVY_EXCLUDE_DOWNLOADED_MODULES: infra/terraform
+
 jobs:
   terraform-scan:
     name: Terraform Scan