Skip to content

Commit db66dd8

Browse files
author
Jacob Woffenden
committed
chore: Add .trivyignore file to ignore vulnerabilities in Python, .NET, and Go dependencies
Signed-off-by: Jacob Woffenden <jacob.woffenden@digital.justice.gov.uk>
1 parent 84f60d6 commit db66dd8

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

.trivyignore

+16
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# Python
2+
## setuptools
3+
CVE-2024-6345 # TODO: @jacobwoffenden - Figure out where this comes from and patch it
4+
5+
# .NET
6+
## We are running the latest dotnet-sdk from Ubuntu
7+
CVE-2024-0057
8+
CVE-2024-38095
9+
CVE-2024-0057
10+
CVE-2024-0057
11+
CVE-2024-38095
12+
CVE-2024-0057
13+
14+
# Go
15+
## aws-sso
16+
CVE-2024-41110 # Vulnerability in github.com/docker/docker, but we don't run Docker on CDE

0 commit comments

Comments
 (0)