trivy: disable more java analyzers

pkg/util/trivy/init.go

@@ -0,0 +1,17 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2016-present Datadog, Inc.
+
+//go:build trivy
+
+// Package trivy holds the scan components
+package trivy
+
+import (
+	trivylog "github.com/aquasecurity/trivy/pkg/log"
+)
+
+func init() {
+	trivylog.InitLogger(false, true)
+}

pkg/util/trivy/trivy.go

@@ -72,6 +72,16 @@ type Collector struct {
 
 var globalCollector *Collector
 
+var trivyDefaultSkipDirs = []string{
+	// already included in Trivy's defaultSkipDirs
+	// "**/.git",
+	// "proc",
+	// "sys",
+	// "dev",
+
+	"**/.cargo/git/**",
+}
+
 func getDefaultArtifactOption(opts sbom.ScanOptions) artifact.Option {
 	parallel := 1
 	if opts.Fast {
@@ -88,7 +98,9 @@ func getDefaultArtifactOption(opts sbom.ScanOptions) artifact.Option {
 		WalkerOption:      walker.Option{},
 	}
 
-	if len(opts.Analyzers) == 1 && opts.Analyzers[0] == OSAnalyzers {
+	option.WalkerOption.SkipDirs = trivyDefaultSkipDirs
+
+	if slicesEqualOrderless(opts.Analyzers, []string{OSAnalyzers}) {
 		option.WalkerOption.OnlyDirs = []string{
 			"/etc/*",
 			"/lib/apk/db/*",
@@ -97,6 +109,31 @@ func getDefaultArtifactOption(opts sbom.ScanOptions) artifact.Option {
 			"/var/lib/dpkg/**",
 			"/var/lib/rpm/*",
 		}
+	} else if slicesEqualOrderless(opts.Analyzers, []string{OSAnalyzers, LanguagesAnalyzers}) {
+		option.WalkerOption.SkipDirs = append(
+			option.WalkerOption.SkipDirs,
+			"bin/**",
+			"boot/**",
+			"dev/**",
+			"media/**",
+			"mnt/**",
+			"proc/**",
+			"run/**",
+			"sbin/**",
+			"sys/**",
+			"tmp/**",
+			"usr/bin/**",
+			"usr/sbin/**",
+			"var/cache/**",
+			"var/lib/containerd/**",
+			"var/lib/containers/**",
+			"var/lib/docker/**",
+			"var/lib/libvirt/**",
+			"var/lib/snapd/**",
+			"var/log/**",
+			"var/run/**",
+			"var/tmp/**",
+		)
 	}
 
 	return option
@@ -313,3 +350,17 @@ func (c *Collector) scanImage(ctx context.Context, fanalImage ftypes.Image, imgM
 		marshaler: c.marshaler,
 	}, nil
 }
+
+func slicesEqualOrderless(a []string, b []string) bool {
+	if len(a) != len(b) {
+		return false
+	}
+
+	for _, ia := range a {
+		if !slices.Contains(b, ia) {
+			return false
+		}
+	}
+
+	return true
+}