feat: exclude node by label (#167)

Signed-off-by: chenk <[email protected]>
aquasecurity · May 24, 2023 · f725fa7 · f725fa7
1 parent c6bc37a
commit f725fa7
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/pkg/trivyk8s/trivyk8s.go b/pkg/trivyk8s/trivyk8s.go
@@ -292,11 +292,11 @@ func isNodeStatusUnknown(resource unstructured.Unstructured) bool {
 }
 
 func ignoreNodeByLabel(resource *artifacts.Artifact, ignoreLabels map[string]string) bool {
-
+	var matchingLabels int
 	for key, val := range ignoreLabels {
-		if lVal, ok := resource.Labels[key]; !ok || lVal != val {
-			return false
+		if lVal, ok := resource.Labels[key]; ok && lVal == val {
+			matchingLabels++
 		}
 	}
-	return true
+	return matchingLabels == len(ignoreLabels)
 }