Document flags to denylist, passlist containers from cloud security (#31257)

cyrbouchiat · janine-c · web-flow · commit fc7e9235bc3f · 2025-08-25T12:21:43.000-04:00
* Document flags to denylist, passlist containers from cloud security

* Very small wording change

---------

Co-authored-by: Janine Chan &lt;64388808+janine-c@users.noreply.github.com&gt;
diff --git a/content/en/security/cloud_security_management/guide/agent_variables.md b/content/en/security/cloud_security_management/guide/agent_variables.md
@@ -43,4 +43,12 @@ The Datadog Agent has several environment variables that can be enabled for Clou
         <td><code>DD_SBOM_HOST_ENABLED</code></td>
         <td>Enables SBOM collection on hosts.</td>
     </tr>
-</table>
+    <tr>
+        <td><code>DD_SBOM_CONTAINER_IMAGE_CONTAINER_EXCLUDE</code></td>
+        <td>Allows denylisting of specific containers from SBOM collection.</td>
+    </tr>
+    <tr>
+        <td><code>DD_SBOM_CONTAINER_IMAGE_CONTAINER_INCLUDE</code></td>
+        <td>Allows allowlisting of specific containers in SBOM collection.</td>
+    </tr>
+</table>
