Merge pull request #173 from docker/document-vulnerability-warnings

Document how to disable the vulnerability warnings

Author: rcjsuen

FAQ.md

@@ -12,6 +12,17 @@ Please refer to [this blog post](https://www.docker.com/blog/docker-dx-extension
 
 For information regarding telemetry, please refer to [TELEMETRY.md](./TELEMETRY.md).
 
+### How can I disable warnings related to vulnerabilities in images?
+
+To disable everything, you can set the `docker.lsp.experimental.vulnerabilityScanning` setting to `false`.
+
+If you would like to disable specific warnings about vulnerabilities, you can opt in or out of them individually as well.
+
+- `docker.lsp.experimental.scout.criticalHighVulnerabilities`
+- `docker.lsp.experimental.scout.notPinnedDigest`
+- `docker.lsp.experimental.scout.recommendedTag`
+- `docker.lsp.experimental.scout.vulnerabilities`
+
 ### I am seeing duplicated editor features (such as code completion suggestions, hover tooltips, etc.) in Compose files.
 
 Do you have any of the following extensions installed?

README.md

@@ -30,7 +30,7 @@ If you are on an unsupported system, let us know of your interest in this extens
 
 You can get linting checks from [BuildKit](https://github.com/moby/buildkit) and [BuildX](https://github.com/docker/buildx) when editing your Dockerfiles.
 
-Any references to images with vulnerabilities are also flagged. Note: This is an experimental feature.
+Any references to images with vulnerabilities are also flagged. This is an **experimental** feature and may change in the future. Refer to our [FAQ.md](./FAQ.md) to see how you can opt in or out of these warnings.
 
 Errors are visible directly in your editor or you can look at them by opening up the Problems panel (<kbd>Ctrl+Shift+M</kbd> on Windows/Linux, <kbd>Shift+Command+M</kbd> on Mac).