chore(security): migrate suppressions to .trivyignore.yaml (PROWLER-2327) (#12314)

This commit is contained in:
César Arroba
2026-08-04 11:13:16 +02:00
committed by GitHub
parent 94254555a4
commit 681be7537d
5 changed files with 77 additions and 61 deletions
+4
View File
@@ -64,6 +64,8 @@ runs:
scanners: 'vuln'
timeout: '5m'
version: 'v0.71.2'
# Explicit: Trivy only auto-loads the classic .trivyignore, never the YAML one.
trivyignores: '.trivyignore.yaml'
- name: Run Trivy vulnerability scan (SARIF)
if: inputs.upload-sarif == 'true' && github.event_name == 'push'
@@ -77,6 +79,8 @@ runs:
scanners: 'vuln'
timeout: '5m'
version: 'v0.71.2'
# Explicit: Trivy only auto-loads the classic .trivyignore, never the YAML one.
trivyignores: '.trivyignore.yaml'
- name: Upload Trivy results to GitHub Security tab
if: inputs.upload-sarif == 'true' && github.event_name == 'push'