Container Image documentation recommends disabling the scanners when looking just for image config, but the CLI does not allow it

[julianvilas]

Description

The Container Image documentation recommends disabling the scanners when you just want to scan the image config for secrets:

$ trivy image --scanners none --image-config-scanners secret vuln-image

That value is not allowed for the --scanners flag in the CLI. Example:

$ docker run -it --rm aquasec/trivy:0.45.0 image --scanners none --image-config-scanners secret alpine
Scan a container image

Usage:
  trivy image [flags] IMAGE_NAME
...
2023-09-12T15:09:42.131Z	FATAL	invalid argument "none" for "--scanners" flag: must be one of ["vuln" "config" "secret" "license"]

Link

https://aquasecurity.github.io/trivy/v0.45/docs/target/container_image/

trivy/docs/docs/target/container_image.md

Lines 174 to 179 in cdab67e

	If you just want to scan the image config, you can disable scanners with `--scanners none`.
	For example:
	```shell
	$ trivy image --scanners none --image-config-scanners secret vuln-image
	```

Suggestions

Either removing this recommendation from the docs or adding the feature to the CLI.

[knqyf263]

Thanks. Created #5182 for tracking.

[y4ney]

@knqyf263 ,The Container Image documentation has not been updated yet, see it https://aquasecurity.github.io/trivy/v0.45/docs/target/container_image/

[nikpivkin]

Hi @y4ney . The release with this fix has not been released yet.

[y4ney]

Okay，Thanks