github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/integration/data/auth_config/config.yml (about)

     1  server:
     2    addr: ":5001"
     3    certificate: "/certs/cert.pem"
     4    key: "/certs/key.pem"
     5  
     6  token:
     7    issuer: "Trivy auth server"  # Must match issuer in the Registry config.
     8    expiration: 900
     9  
    10  users:
    11    # Password is specified as a BCrypt hash. Use `htpasswd -nB USERNAME` to generate.
    12    "admin":
    13      password: "$2y$05$LO.vzwpWC5LZGqThvEfznu8qhb5SGqvBSWY1J3yZ4AxtMRZ3kN5jC"  # badmin
    14    "test":
    15      password: "$2y$05$WuwBasGDAgr.QCbGIjKJaep4dhxeai9gNZdmBnQXqpKly57oNutya"  # 123
    16  
    17  acl:
    18    - match: {account: "admin"}
    19      actions: ["*"]
    20      comment: "Admin has full access to everything."
    21    - match: {account: "test"}
    22      actions: ["pull"]
    23      comment: "User \"test\" can pull stuff."