Add trivyignore file with risk acceptance (#1669)

This allows us to have a passing CI with proper documentation of the accepted risk.
mindersec · Nov 15, 2023 · 5bbee88 · 5bbee88
1 parent 70365d6
commit 5bbee88
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.trivyignore b/.trivyignore
@@ -0,0 +1,3 @@
+# Ignoring this CVE since we've got mitigations for it and we need to use this
+# version because of a regression
+CVE-2023-47108