Using a flat irvyignore file to be compatible with GHA (#1607)

replicatedhq · Dec 11, 2024 · 29c989e · 29c989e
1 parent 4fd4c21
commit 29c989e
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 6 deletions.
diff --git a/.github/actions/scan-image/action.yml b/.github/actions/scan-image/action.yml
@@ -26,7 +26,7 @@ runs:
         ignore-unfixed: true
         severity: CRITICAL,HIGH,MEDIUM
         exit-code: 1
-        trivyignores: .trivyignore.yaml
+        trivyignores: .trivyignore
 
     - name: Output sarif
       uses: aquasecurity/[email protected]

diff --git a/.trivyignore b/.trivyignore
@@ -0,0 +1,2 @@
+# Accepted upstream; not in code path; https://github.com/kubernetes/kubernetes/pull/121842
+CVE-2023-47108
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# Accepted upstream; not in code path; https://github.com/kubernetes/kubernetes/pull/121842
		CVE-2023-47108