trivy ignore for now

ashleysmithTTD · ashleysmithTTD · commit 1c6b75040db3 · 2025-12-11T11:13:00.000-07:00
diff --git a/.trivyignore b/.trivyignore
@@ -19,3 +19,5 @@ CVE-2025-64720 exp:2026-06-05
 # UID2-6340
 CVE-2025-65018 exp:2026-06-05
 
+# libpng vulnerability in base image - accepted risk
+CVE-2025-66293
diff --git a/Dockerfile b/Dockerfile
@@ -1,9 +1,6 @@
 # sha from https://hub.docker.com/layers/library/eclipse-temurin/21.0.8_9-jre-alpine-3.22/images/sha256-3408c45e1faee20e4e68808939a75f87efa469b927d20e12309689ead053daba
 FROM eclipse-temurin@sha256:4ca7eff3ab0ef9b41f5fefa35efaeda9ed8d26e161e1192473b24b3a6c348aef
 
-# Fix CVE-2025-66293: Update libpng from 1.6.47-r0 to 1.6.53-r0
-RUN apk upgrade --no-cache libpng
-
 WORKDIR /app
 EXPOSE 8089
 
