show misconfig ID in table view

[itaysk]

Description

the table format of misconfiguration scanner doesn't show the ID of each finding, which makes it hard to refer to the ID for e.g ignore it. For reference, the vulnerability scanner shows CVE ID in table view.

Target

None

Scanner

Misconfiguration

[fatihtokus]

Hi @itaysk ,

Is this yellow column what you need?

[afdesk]

@fatihtokus I think Itay meant table (default) output.
Now misconfig results don't contain IDs:

$ trivy fs --scanners misconfig .
...
Tests: 120 (SUCCESSES: 113, FAILURES: 7, EXCEPTIONS: 0)
Failures: 7 (UNKNOWN: 0, LOW: 5, MEDIUM: 2, HIGH: 0, CRITICAL: 0)

MEDIUM: Container 'main' of StatefulSet 'trivy' should set 'securityContext.allowPrivilegeEscalation' to false
════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════
A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

See https://avd.aquasec.com/misconfig/ksv001
──────────────────────────────────────────────

[itaysk]

yes :) although it's not a table, the flag is called table

[fatihtokus]

gotcha :)