minke.yu/sglang
1
0
Fork 0
Code Issues Pull Requests Actions 12 Packages Projects Releases Wiki Activity

Skip Go stdlib and NVIDIA tool CVEs in Trivy scan (#21905)

Browse Source 
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kangyan-Zhou
2026-04-01 21:41:16 -07:00
committed by GitHub
co-authored by Claude Opus 4.6
parent cb0c2cbfdb
commit afa14ffac9
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/trivy-scan-dev.yml
+2
View File
@@ -36,6 +36,7 @@ jobs:
output: 'trivy-results-${{ matrix.tag }}.sarif' output: 'trivy-results-${{ matrix.tag }}.sarif'
severity: 'CRITICAL,HIGH' severity: 'CRITICAL,HIGH'
ignore-unfixed: true ignore-unfixed: true
skip-dirs: 'usr/local/go,opt/nvidia'
- name: Upload Trivy scan results to GitHub Security - name: Upload Trivy scan results to GitHub Security
uses: github/codeql-action/upload-sarif@v4 uses: github/codeql-action/upload-sarif@v4
@@ -53,6 +54,7 @@ jobs:
format: 'table' format: 'table'
severity: 'CRITICAL,HIGH' severity: 'CRITICAL,HIGH'
ignore-unfixed: true ignore-unfixed: true
skip-dirs: 'usr/local/go,opt/nvidia'
- name: Scan summary - name: Scan summary
if: always() if: always()