chore: add .trivyignore to silence irrelevant CVE detections

digitalservicebund · May 15, 2024 · 2550775 · 2550775
1 parent 3162fcf
commit 2550775
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.trivyignore b/.trivyignore
@@ -0,0 +1,8 @@
+# These CVEs are detected in Go helpers from paketobuildpacks.
+# The helper does not perform any network connections, so the vulnerabilities are not relevant.
+CVE-2023-45288
+CVE-2023-45289
+CVE-2023-45290
+CVE-2024-24783
+CVE-2024-24784
+CVE-2024-24785