add irrelevant esbuild issues to trivyignore

wmo-im · Nov 5, 2024 · 21d340b · 21d340b
1 parent dde2a54
commit 21d340b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -22,4 +22,5 @@ jobs:
           exit-code: '1'
           ignore-unfixed: true
           vuln-type: 'os,library'
-          severity: 'CRITICAL,HIGH'
+          severity: 'CRITICAL,HIGH'
+          ignorefile: '.trivyignore'
diff --git a/.trivyignore b/.trivyignore
@@ -0,0 +1,4 @@
+# our image does not use the network features of esbuild https://esbuild.github.io/api/#serve
+CVE-2024-24790
+CVE-2023-45288
+CVE-2024-34156