From 9b35cabb6b9bd58c40a13f558e60505b05dd608d Mon Sep 17 00:00:00 2001 From: Victor Getz Date: Tue, 2 May 2023 14:50:22 +0200 Subject: [PATCH] Add trivy ignore option --- .github/workflows/release-and-test.yaml | 1 + charts/registry-creds/.trivyignore | 3 +++ 2 files changed, 4 insertions(+) create mode 100644 charts/registry-creds/.trivyignore diff --git a/.github/workflows/release-and-test.yaml b/.github/workflows/release-and-test.yaml index 92573dbe..fc01ee71 100644 --- a/.github/workflows/release-and-test.yaml +++ b/.github/workflows/release-and-test.yaml @@ -81,6 +81,7 @@ jobs: exit-code: '1' ignore-unfixed: false severity: 'MEDIUM,HIGH,CRITICAL' + trivyignores: 'charts/${{matrix.chart}}/.trivyignore' limit-severities-for-sarif: true - name: Lint ${{ matrix.chart }} diff --git a/charts/registry-creds/.trivyignore b/charts/registry-creds/.trivyignore new file mode 100644 index 00000000..22d99e66 --- /dev/null +++ b/charts/registry-creds/.trivyignore @@ -0,0 +1,3 @@ +# Does not work without it +AVD-KSV-0041 +AVD-KSV-0049 \ No newline at end of file