scanners

Which scanners cloudg run and cloudg scan start, and the extra arguments each one gets.

Keys

Key	Type	Default	Description
enabled	list	[prowler, scoutsuite, checkov, trivy, iam]	Scanners to run. Any of prowler, scoutsuite, checkov, trivy and iam (the built-in IAM linter).
prowler_extra_args	list	[]	Extra command-line arguments passed to Prowler.
scoutsuite_extra_args	list	[]	Extra command-line arguments passed to ScoutSuite.
checkov_extra_args	list	[]	Extra command-line arguments passed to Checkov.
checkov_frameworks	list	[]	Checkov frameworks to scan. Empty = auto-detect all (recommended for cloud infra).
trivy_extra_args	list	[]	Extra command-line arguments passed to Trivy.
trivy_images	list	[]	Container images for Trivy to scan.
iac_directories	list	[]	Infrastructure-as-code directories for Checkov to scan.
timeout_seconds	int	3600	Time limit for each scanner process, in seconds (minimum 60).

In config.yaml

config.yaml (scanners)

scanners:
  enabled:
    - prowler
    - scoutsuite
    - checkov
    - trivy
    - iam
  prowler_extra_args: []
  scoutsuite_extra_args: []
  checkov_extra_args: []
  checkov_frameworks: []     # Empty = auto-detect all frameworks (recommended)
    # Uncomment below to restrict to specific frameworks:
    # - terraform
    # - cloudformation
    # - arm
    # - kubernetes
  trivy_extra_args: []
  trivy_images: []
  iac_directories: []
  timeout_seconds: 3600

Read from the annotated example config.yaml and the CloudGConfig models in cloudg/config.py.