[CRIMAPP-1476] Ignore Trivy vulns outside our control

ministryofjustice · Nov 14, 2024 · b1a7a83 · b1a7a83
1 parent d0cbbdb
commit b1a7a83
Showing 1 changed file with 12 additions and 3 deletions.
diff --git a/.trivyignore b/.trivyignore
@@ -1,5 +1,14 @@
 # CVEs that are outside of our control
 #
-CVE-2023-2253
-CVE-2023-28840
-CVE-2023-30551
+# Accept all risks until 2025-05-14 - may have been resolved by cloud platform
+GHSA-9763-4f94-gfch exp:2025-05-14
+CVE-2024-41110 exp:2025-05-14
+CVE-2023-49569 exp:2025-05-14
+CVE-2023-49568 exp:2025-05-14
+CVE-2024-3817 exp:2025-05-14
+CVE-2024-6257 exp:2025-05-14
+CVE-2024-23652 exp:2025-05-14
+CVE-2024-23653 exp:2025-05-14
+CVE-2024-23651 exp:2025-05-14
+CVE-2024-21626 exp:2025-05-14
+CVE-2024-26147 exp:2025-05-14