add trivyignore config

astronomer · Jan 25, 2023 · c798a79 · c798a79
1 parent d473961
commit c798a79
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -226,7 +226,7 @@ commands:
       - run:
           name: Scan the local image with trivy
           command: |
-            trivy --cache-dir /tmp/workspace/trivy-cache image --ignore-unfixed -s HIGH,CRITICAL --exit-code 1 --no-progress << parameters.image_name >>
+            trivy --cache-dir /tmp/workspace/trivy-cache image --ignore-unfixed -s HIGH,CRITICAL --ignorefile .trivyignore --exit-code 1 --no-progress << parameters.image_name >>
       - save_cache:
           key: trivy-cache
           paths:

diff --git a/.trivyignore b/.trivyignore
@@ -0,0 +1,2 @@
+
+CVE-2022-40897