diff --git a/README-dockerhub.md b/README-dockerhub.md index c9f086a7..54897107 100644 --- a/README-dockerhub.md +++ b/README-dockerhub.md @@ -127,12 +127,19 @@ docker run -it aquasec/aqua-scanner trivy fs --scanners config,vuln,secret . ```bash -podman pull aquasec/aqua-scanner - -podman run -it --rm --security-opt seccomp=unconfined aquasec/aqua-scanner trivy fs --scanners config,vuln,secret . +podman run --rm \ + -e AQUA_KEY=${AQUA_KEY} \ + -e AQUA_SECRET=${AQUA_SECRET} \ + -e TRIVY_RUN_AS_PLUGIN='aqua' \ + -e SAST='true' \ + -e INPUT_WORKING_DIRECTORY='/scanning' \ + -v ${WORKSPACE}:/scanning \ + docker.io/aquasec/aqua-scanner \ + git config --global --add safe.directory /scanning && trivy fs --scanners='config,vuln,secret' . ``` +When working within CI environment, it's important to include the Source Code Management (SCM) tokens for pull requests. You can find additional guidance and details on this matter within our platform for your reference about each SCM. ## Compatibility The plugin is designed for Docker environments and is compatible with Linux containers.