ci: ignore CVE-2024-0567 and CVE-2023-5981 to fix ci (#506)

Signed-off-by: Xander Grzywinski <xandergrzyw@gmail.com>
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
Co-authored-by: Sertac Ozercan <sozercan@gmail.com>

integration/fixtures/trivy_ignore.rego

@@ -6,11 +6,15 @@ default ignore = false
 
 # Ignore the following Vulnerability IDs
 ignore_vulnerability_ids := {
-    # centos 7.6.1810
+    # docker.io/library/centos:7.6.1810
     # bind-license package version "9.11.4-26.P2.el7_9.15" does not exist
     "CVE-2023-3341",
     # libssh2 package version "1.8.0-4.el7_9.1" does not exist yet
-    "CVE-2020-22218"
+    "CVE-2020-22218",
+
+    # docker.io/library/nginx:1.21.6
+    # debian db bug since there's no libgnutls30 3.7.1-5+deb11u5
+    "CVE-2024-0567", "CVE-2023-5981"
 }
 
 # For ignoring vulnID

integration/patch_test.go

@@ -173,7 +173,7 @@ func patch(t *testing.T, ref, patchedTag, path string, ignoreErrors bool) {
 		"-t="+patchedTag,
 		"-r="+path+"/scan.json",
 		"-s="+scannerPlugin,
-		"--timeout=20m",
+		"--timeout=30m",
 		addrFl,
 		"--ignore-errors="+strconv.FormatBool(ignoreErrors),
 		"--output="+path+"/vex.json",