feat(misconf): support for ignoring by inline comments for Dockerfile

[nikpivkin]

Discussed in #7832

^{Originally posted by tstraley October 30, 2024}

Description

According to the docs, trivy misconfig scans support filtering via inline comments - but this appears to only work for terraform files https://aquasecurity.github.io/trivy/test/docs/configuration/filtering/#by-inline-comments

Would like to have a similar capability for Dockerfile scanning, so that we can more accurately accept / ignore specific lines in our Dockerfile while not excluding the specific check entirely.

Target

Filesystem

Scanner

Misconfiguration