From ee9459afcbf7fd7a10a41bf1ba9115e326abdece Mon Sep 17 00:00:00 2001
From: hayk99 <hayk.kocharyan@sysdig.com>
Date: Mon, 4 May 2026 15:25:57 +0200
Subject: [PATCH] feat: add new features section

---
 charts/registry-scanner/Chart.yaml            |  4 +-
 charts/registry-scanner/README.md             |  2 +-
 .../registry-scanner/templates/configmap.yaml |  7 ++++
 .../tests/configmap_test.yaml                 | 39 +++++++++++++++++++
 4 files changed, 49 insertions(+), 3 deletions(-)

diff --git a/charts/registry-scanner/Chart.yaml b/charts/registry-scanner/Chart.yaml
index 0ea8fa703..9e93d2ab4 100644
--- a/charts/registry-scanner/Chart.yaml
+++ b/charts/registry-scanner/Chart.yaml
@@ -4,7 +4,7 @@ description: Sysdig Registry Scanner
 type: application
 home: https://www.sysdig.com/
 icon: https://avatars.githubusercontent.com/u/5068817?s=200&v=4
-version: 1.10.4
-appVersion: 0.11.3
+version: 1.10.5
+appVersion: 0.11.4
 maintainers:
   - name: sysdiglabs
diff --git a/charts/registry-scanner/README.md b/charts/registry-scanner/README.md
index d8c7e1597..d0cae0096 100644
--- a/charts/registry-scanner/README.md
+++ b/charts/registry-scanner/README.md
@@ -141,7 +141,7 @@ Use the following command to deploy:
 helm upgrade --install registry-scanner \
    --namespace sysdig-agent \
    --create-namespace \
-   --version=1.10.4 \
+   --version=1.10.5 \
    --set config.secureBaseURL=<SYSDIG_SECURE_URL> \
    --set config.secureAPIToken=<SYSDIG_SECURE_API_TOKEN> \
    --set config.secureSkipTLS=true \
diff --git a/charts/registry-scanner/templates/configmap.yaml b/charts/registry-scanner/templates/configmap.yaml
index f049b9886..91d15fed4 100644
--- a/charts/registry-scanner/templates/configmap.yaml
+++ b/charts/registry-scanner/templates/configmap.yaml
@@ -144,4 +144,11 @@ data:
     reportPath: /output/registry-scanner-{DATE}.json
     {{- end }}
 
+    {{- if .Values.config.features }}
+    features:
+      {{- if hasKey .Values.config.features "force_scan_status_enabled" }}
+      force_scan_status_enabled: {{ .Values.config.features.force_scan_status_enabled }}
+      {{- end }}
+    {{- end }}
+
     vulnerabilityDBVersion: {{ .Values.config.vulnerabilityDBVersion | default "v2" | quote }}
diff --git a/charts/registry-scanner/tests/configmap_test.yaml b/charts/registry-scanner/tests/configmap_test.yaml
index 6068558a6..95f09155a 100644
--- a/charts/registry-scanner/tests/configmap_test.yaml
+++ b/charts/registry-scanner/tests/configmap_test.yaml
@@ -369,3 +369,42 @@ tests:
       - matchRegex:
           path: data['config.yaml']
           pattern: "scan:((.|\n)*)inlineScanImage: custom-registry.com/custom/scanner:v1.0.0-fips\n"
+
+  - it: features section is not present by default
+    asserts:
+      - notMatchRegex:
+          path: data['config.yaml']
+          pattern: "features:"
+
+  - it: features section is present when force_scan_status_enabled is set to false
+    set:
+      config:
+        features:
+          force_scan_status_enabled: false
+    asserts:
+      - matchRegex:
+          path: data['config.yaml']
+          pattern: "features:\n\\s*force_scan_status_enabled: false"
+
+  - it: features section is present when force_scan_status_enabled is set to true
+    set:
+      config:
+        features:
+          force_scan_status_enabled: true
+    asserts:
+      - matchRegex:
+          path: data['config.yaml']
+          pattern: "features:\n\\s*force_scan_status_enabled: true"
+
+  - it: features section handles only defined fields
+    set:
+      config:
+        features:
+          force_scan_status_enabled: true
+    asserts:
+      - matchRegex:
+          path: data['config.yaml']
+          pattern: "features:\n\\s*force_scan_status_enabled: true"
+      - notMatchRegex:
+          path: data['config.yaml']
+          pattern: "features:((.|\n)*)other_field"