diff --git a/.trivyignore b/.trivyignore new file mode 100644 index 0000000000..5bf578a27d --- /dev/null +++ b/.trivyignore @@ -0,0 +1,2 @@ +# Accept the risk +CVE-2025-0395 diff --git a/.trivyignore.yaml b/.trivyignore.yaml deleted file mode 100644 index 53c726fe89..0000000000 --- a/.trivyignore.yaml +++ /dev/null @@ -1,13 +0,0 @@ -# This file is used to suppress both: -# * Trivy vulnerability scans (under the 'vulnerabilities' section). -# * Trivy's linting warnings (under the 'misconfigurations' section). -# For more information about the Trivy Ignore YAML file, please refer to: -# https://aquasecurity.github.io/trivy/v0.48/docs/configuration/filtering/#trivyignoreyaml -# Justification should be included above each suppression group. - -######################## Trivy CVE supressions ######################## -vulnerabilities: - # * Relevant packages:: libc-bin - # * These packages are part of Intel's latest official Ubuntu base image. - - id: CVE-2025-0395 -