Commit 1deb0ce
fix(security): Ignore Go stdlib CVEs in oven/bun base image
Add CVE-2025-68121 (crypto/tls session resumption) and CVE-2025-61730
(TLS 1.3 handshake) to .trivyignore. These are Go stdlib vulnerabilities
in the oven/bun Docker base image and are not exploitable in this
Node.js/Bun application.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>1 parent 16b0e23 commit 1deb0ce
1 file changed
+2
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
| 19 | + | |
| 20 | + | |
0 commit comments