[DOC] filtering vulns with trivy

[sozercan]

What kind of documentation improvement is needed?

None

What is the change that is needed?

document how to filter vulns using rego policy or ignore file
https://aquasecurity.github.io/trivy/v0.43/docs/configuration/filtering/

example from CI:

copacetic/.github/workflows/build.yml

Lines 112 to 126 in 3e22d49

	package trivy
	import data.lib.trivy
	default ignore = false
	ignore_vulnerability_ids := {
	# centos 7.6.1810
	# bind-license package version "9.11.4-26.P2.el7_9.14" does not exist
	"CVE-2023-2828"
	}
	ignore {
	input.VulnerabilityID == ignore_vulnerability_ids[_]
	}

[anubhav06]

Question: This needs to be added to the website docs or the github docs?

[anubhav06]

I've come up with this documentation: https://docs.google.com/document/d/1ZkV2fxmYY2z9EP7FJtNuAS6AF1Kkyg6QfFYJGd5gUng/edit?usp=sharing
Let me know what do you think about it.

[sozercan]

Question: This needs to be added to the website docs or the github docs?

Website docs, all user-facing docs should be there.

We should assess docs in github if they need to be moved to website (opened #249).

[sozercan]

I've come up with this documentation: docs.google.com/document/d/1ZkV2fxmYY2z9EP7FJtNuAS6AF1Kkyg6QfFYJGd5gUng/edit?usp=sharing Let me know what do you think about it.

Thanks! Please feel to open a PR for this.