Skip to content

Commit

Permalink
chore: updated trivy ignore with reasons for false positives
Browse files Browse the repository at this point in the history
  • Loading branch information
matbmoser authored Feb 19, 2024
1 parent 16aeaf1 commit 31abff0
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions .trivyignore
Original file line number Diff line number Diff line change
Expand Up @@ -22,11 +22,15 @@
#################################################################################

# List of false positives
# False positive related to medium findings
CVE-2023-5363
CVE-2023-0464
CVE-2023-44487
CVE-2023-51074
CVE-2023-33201
# Secret Scanning False Positive in Backend Charts
AVD-KSV-0109

# Docker False Positives
KSV014
KSV117

2 comments on commit 31abff0

@matbmoser
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I needed to update this for getting the approval from security team for the Trivy scans.

@matbmoser
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The commit was done under the supervision and approval from two commiters. And a member from the security team.

Please sign in to comment.