Option to Fail When No Language-Specific Files Are Detected

[Varorbc]

Description

origin issue : #192

Is there currently an option to make Trivy fail (non-zero exit code) when scanning a repository but no language-specific files are detected (Number of language-specific files: num=0)?

If not, could you consider adding a flag like --fail-on-no-files? This would be extremely valuable in CI/CD pipelines where "successful" scans that didn't actually analyze any dependency files could create false security assurances.

This would prevent silent failures when:

• Scan paths are incorrect
• Dependency files are missing
• Cache issues cause files to be skipped

Target

Git Repository

Scanner

Vulnerability