Add trivyignore

.github/workflows/publish-to-dockerhub.yml

@@ -49,6 +49,7 @@ jobs:
         with:
           sparse-checkout: |
             trivy.yaml
+            .trivyignore.yaml
           sparse-checkout-cone-mode: false
           image-ref: '${{ secrets.DOCKERHUB_ACCOUNT }}/${{ secrets.DOCKERHUB_REPO }}:${{ env.COUNTRY_CONFIG_VERSION }}'
           trivy-config: trivy.yaml

.trivyignore.yaml

@@ -0,0 +1,14 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+#
+# OpenCRVS is also distributed under the terms of the Civil Registration
+# & Healthcare Disclaimer located at http://opencrvs.org/license.
+#
+# Copyright (C) The OpenCRVS Authors located at https://github.com/opencrvs/opencrvs-core/blob/master/AUTHORS.
+misconfigurations:
+  - id: AVD-DS-0002
+    statement: Ignore yarn cache and Dockerfile
+    paths:
+      - 'Dockerfile'
+      - '/usr/local/share/.cache'