Merge pull request #2412 from stackhpc/ubuntu-trivy-caracal

priteau · web-flow · commit 6b53934b9030 · 2026-07-06T15:14:41.000+02:00
Skip kernel vulnerabilities for container images
diff --git a/tools/scan-images.sh b/tools/scan-images.sh
@@ -82,7 +82,7 @@ generate_summary_csv() {
   jq -r '.Results[]
       | select(.Vulnerabilities)
       | .Vulnerabilities
-      | map(select(.PkgName | test("kernel") | not ))
+      | map(select(.PkgName | test("^kernel|^linux-libc-dev") | not ))
       | group_by(.VulnerabilityID)
       | map(
         [

Original file line number	Diff line number	Diff line change
`@@ -82,7 +82,7 @@ generate_summary_csv() {`
`82`	`82`	`jq -r '.Results[]`
`83`	`83`	`\| select(.Vulnerabilities)`
`84`	`84`	`\| .Vulnerabilities`
`85`		`- \| map(select(.PkgName \| test("kernel") \| not ))`
	`85`	`+ \| map(select(.PkgName \| test("^kernel\|^linux-libc-dev") \| not ))`
`86`	`86`	`\| group_by(.VulnerabilityID)`
`87`	`87`	`\| map(`
`88`	`88`	`[`