ci: add .trivyignore

This commit is contained in:
sebthom 2025-12-18 21:12:00 +01:00
parent 6b8c3c7f8e
commit 243e3c6b37
2 changed files with 7 additions and 2 deletions

6
.trivyignore Normal file
View File

@ -0,0 +1,6 @@
# TODO https://gitea.com/gitea/act_runner/issues/774
CVE-2024-25621
CVE-2024-41110
CVE-2025-52881
CVE-2025-58183
CVE-2025-61729

View File

@ -163,8 +163,7 @@ fi
#################################################
# perform security audit
#################################################
# TODO see https://gitea.com/gitea/act_runner/issues/513
if [[ ${DOCKER_AUDIT_IMAGE:-1} == "1" && $GITEA_ACT_RUNNER_VERSION == "nightly" ]]; then
if [[ ${DOCKER_AUDIT_IMAGE:-1} == "1" ]]; then
run_step "Auditing docker image [$image_name]" -- \
bash "$shared_lib/cmd/audit-image.sh" "$image_name"
fi