fix: load trivy-policies by config (#1928)

Signed-off-by: chenk <hen.keinan@gmail.com>
aquasecurity · Mar 20, 2024 · 5aaa7de · 5aaa7de
1 parent 72722f4
commit 5aaa7de
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/pkg/operator/operator.go b/pkg/operator/operator.go
@@ -207,9 +207,12 @@ func Start(ctx context.Context, buildInfo trivyoperator.BuildInfo, operatorConfi
 			return fmt.Errorf("unable to setup scan job  reconciler: %w", err)
 		}
 	}
-	policyLoader, err := buildPolicyLoader(trivyOperatorConfig)
-	if err != nil {
-		return fmt.Errorf("unable to constract policy loader: %w", err)
+	var policyLoader policy.Loader
+	if operatorConfig.ConfigAuditScannerEnabled {
+		policyLoader, err = buildPolicyLoader(trivyOperatorConfig)
+		if err != nil {
+			return fmt.Errorf("unable to constract policy loader: %w", err)
+		}
 	}
 
 	if operatorConfig.ScannerReportTTL != nil {