Vulnerability Scanning

[I506dk]

Looking for answers for enabling vulnerability scanning (https://getarcane.app/docs/features/vulnerability-scans) using docker compose. I see the backend settings, but do not know how to change them or how to affect them. Referencing them in any case in docker compose doesn't seem to have any effect, and setting env variables in the arcane container doesn't seem to either.

Ideally scans are run on a schedule, and if possible a trivy image is NOT used. If this isn't possible, will just have to keep vulnerability scanning turned off in production, and do that outside of Arcane.

[kmendell]

The Settings can be configured via the UI under Environments > <env_id> > Job Schedules you can turn it on there, and the other settings are on the security tab.

The env overide variables only work if UI_CONFIGURATION_DIABLED=true or AGENT_MODE is true