Skip Go stdlib and NVIDIA tool CVEs in Trivy scan (#21905)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 4.6
parent
cb0c2cbfdb
commit
afa14ffac9
@@ -36,6 +36,7 @@ jobs:
|
||||
output: 'trivy-results-${{ matrix.tag }}.sarif'
|
||||
severity: 'CRITICAL,HIGH'
|
||||
ignore-unfixed: true
|
||||
skip-dirs: 'usr/local/go,opt/nvidia'
|
||||
|
||||
- name: Upload Trivy scan results to GitHub Security
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
@@ -53,6 +54,7 @@ jobs:
|
||||
format: 'table'
|
||||
severity: 'CRITICAL,HIGH'
|
||||
ignore-unfixed: true
|
||||
skip-dirs: 'usr/local/go,opt/nvidia'
|
||||
|
||||
- name: Scan summary
|
||||
if: always()
|
||||
|
||||
Reference in New Issue
Block a user