diff --git a/README-dockerhub.md b/README-dockerhub.md index 152e52a7..590d97b6 100644 --- a/README-dockerhub.md +++ b/README-dockerhub.md @@ -78,7 +78,7 @@ There are some env vars for overriding this data; | ---------------- | ------------------------------------------ | --------------------------------------------- | | `--debug` | Get more detailed output as Trivy runs. | | | `--severities` | The Severities that you are interested in. | `--severities CRITICAL,HIGH,UNKNOWN` | -| `--pipelines` | Scan repository pipeline files. | `--pipelines` / `PIPELINES=1 trivy ...` | +| `--skip-pipelines` | Skip scan repository pipeline files. | `--skip-pipelines` | | `--sast` | To enable SAST scanning. | `--sast` | | `--reachability` | To enable reachability scanning. | `--reachability` | | `--package-json` | Scan package.json files without lock files | `--package-json` / `PACKAGE_JSON=1 trivy ...` | diff --git a/README.md b/README.md index 06e3ec87..44df632a 100644 --- a/README.md +++ b/README.md @@ -89,8 +89,8 @@ Certain scanners have additional behaviors ### Pipelines -The pipelines scanner is enabled by providing either `--pipelines` flag or `PIPELINES=1` environment variable. -It uses [Pipeline Parser](https://github.com/argonsecurity/pipeline-parser) to parse the pipelines, and therefore, supports only the platforms that are supported by the package. +The pipelines scanner is enabled, to skip fetch and scan pipelines add `--skip-pipelines` flag. +pipelines scanning uses [Pipeline Parser](https://github.com/argonsecurity/pipeline-parser) to parse the pipelines, and therefore, supports only the platforms that are supported by the package. The results of the scanner are: