Skip to content

Commit

Permalink
chore: add .trivyignore to silence irrelevant CVE detections
Browse files Browse the repository at this point in the history
  • Loading branch information
kaibernhard committed May 15, 2024
1 parent 3162fcf commit 2550775
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions .trivyignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
# These CVEs are detected in Go helpers from paketobuildpacks.
# The helper does not perform any network connections, so the vulnerabilities are not relevant.
CVE-2023-45288
CVE-2023-45289
CVE-2023-45290
CVE-2024-24783
CVE-2024-24784
CVE-2024-24785

0 comments on commit 2550775

Please sign in to comment.