feat: Support passing value overrides for configuration checks

[owenrumney]

Description

Add support for passing variable files for configuration scanning

Terraform
Pass --tf-vars to override default terraform values

Helm
Support standard helm install flags (with the helm prefix)
--helm-set
--helm-values
--helm-set-string
--helm-set-file

Related issues

• Close provide values file for misconfiguration scanning #2276

Remove this section if you don't have related PRs.

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)

[knqyf263]

Currently, the config format is like the following.

misconfiguration:
  helm-values:
    - values-prod.yaml
  helm-set:
    - key1=val1
    - key2=val2
  tf-vars:
    - foo.tfvars
    - bar.tfvars

Do you think grouping languages is too nested as below? I'm not sure which is better. I just would like to hear your thought.

misconfiguration:
  helm:
    values:
      - values-prod.yaml
    set:
      - key1=val1
      - key2=val2
  terraform:
    vars:
      - foo.tfvars
      - bar.tfvars

[owenrumney]

Helm uses --set but I changed it to --helm-set to avoid collisions in the future with other configs that might be in the same files system that also wanted a --set

I like personally like how explicit the second config block is and I don't think it's too nested. @liamg - do you have an opinion?

[owenrumney]

So I assume I would just change the ConfigName to misconfiguration.helm.values to achieve the second config block?

[knqyf263]

So I assume I would just change the ConfigName to misconfiguration.helm.values to achieve the second config block?

Yes. misconfiguration.helm.values should work.

[owenrumney]

Changed to misconfiguration.helm.xxxx and misconfiguration.terraform.xxx

[knqyf263]

Could you also update this page?
https://github.com/aquasecurity/trivy/blob/main/docs/docs/references/customization/config-file.md

[owenrumney]

Could you also update this page? https://github.com/aquasecurity/trivy/blob/main/docs/docs/references/customization/config-file.md

Updated this with the possible config settings

[knqyf263]

Cool. Thanks.