Specify the type of finding to ignore via Rego

[nikpivkin]

Now ignore policies are applied to each find of a different type, which makes it hard to ignore because some types have fields with the same names. In the example I want to ignore a license by package name, but also ignore a vulnerability because the vulnerability also contains a field with a same name.

Policy:

package trivy

default ignore = false

ignore {
    input.PkgName == "systemd"
}

Run Trivy: trivy image centos:7 --scanners license,vuln -d --ignore-policy test.rego --show-suppressed