I see the "-enable-updated" option, and it appears this option is enabled by default. I do not see an option to disable the rule updater ("-disable-updated"?)
If the secret.yar file has been downloaded there is no option to disable checking for updates to secret rules on subsequent runs. This means that it not possible to build a container image with a secret.yar file, move the image to a server that is disconnected from the internet and scan images.
I see the "-enable-updated" option, and it appears this option is enabled by default. I do not see an option to disable the rule updater ("-disable-updated"?)
If the secret.yar file has been downloaded there is no option to disable checking for updates to secret rules on subsequent runs. This means that it not possible to build a container image with a secret.yar file, move the image to a server that is disconnected from the internet and scan images.