Skip Go stdlib and NVIDIA tool CVEs in Trivy scan (#21905)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kangyan-Zhou
2026-04-01 21:41:16 -07:00
committed by GitHub
co-authored by Claude Opus 4.6
parent cb0c2cbfdb
commit afa14ffac9
+2
View File
@@ -36,6 +36,7 @@ jobs:
output: 'trivy-results-${{ matrix.tag }}.sarif'
severity: 'CRITICAL,HIGH'
ignore-unfixed: true
skip-dirs: 'usr/local/go,opt/nvidia'
- name: Upload Trivy scan results to GitHub Security
uses: github/codeql-action/upload-sarif@v4
@@ -53,6 +54,7 @@ jobs:
format: 'table'
severity: 'CRITICAL,HIGH'
ignore-unfixed: true
skip-dirs: 'usr/local/go,opt/nvidia'
- name: Scan summary
if: always()