.trivyignore.yaml

moubctez · moubctez · commit 052664c7e48b · 2026-04-23T11:39:18.000+02:00
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -38,6 +38,9 @@ jobs:
 
       - name: Scan code with Trivy
         uses: aquasecurity/trivy-action@0.36.0
+        env:
+          TRIVY_IGNOREFILE: ".trivyignore.yaml"
+          TRIVY_SHOW_SUPPRESSED: 1
         with:
           scan-type: 'fs'
           scan-ref: '.'
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
@@ -0,0 +1,4 @@
+vulnerabilities:
+  - id: GHSA-w5hq-g745-h8pq
+    expired_at: 2026-03-30
+    statement: "Not yet fixed in dependencies'
