Allow passing multiple files to commands

[mattyclarkson]

We currently allow two types of invocation to commands:

trivy <cmd> <single-dir> --files-patterns <pattern>
trivy <cmd> <single-file>

It would be incredibly useful to specify multiple files:

trivy <cmd> <single-file> <single-file>

This would be especially useful to hook up Trivy into the pre-commit framework as pre-commit passes multiple files to be checked to the tool and does not, and will not, support passing single files.

With this implemented we can have pre-commit hooks for trivy fs/trivy config, etc to prevent violations ever getting into a repository.

[knqyf263]

I remember there was the same request. Let's see how much demand there is.
#1162

[bober2000]

It seems to be closed :(

[bober2000]

We also need this functionality.
While using GitHub Action I want to check only changed files/directories as full scan is not needed and taking too much time

[wagde-orca]

i would also like to see this option to send a list of files (or a file that contains file paths) to scan.
another alternative is to support links, if trivy supports links we can generate a directory which contains links to the real files that should be scanned...
for example if we want to scan
/a/b/c/a.jar
/d/d.jar
we can create a directory called links which contains links to the files
links/a/b/c/a.jat -> /a/b/c/a.jar
links/d/d.jar -> /d/d.jar
and we can invoke trivy rootfs /links
trivy will resolve the links of the files and scan them

[vitalii-morvaniuk-airslate]

Any news on this?