Merge pull request #184 from IABTechLab/gdm-UID2-5565-vuln

Updated trivy-secret.yaml ref

Author: gmsdelmundo

actions/vulnerability_scan/action.yaml

@@ -29,7 +29,7 @@ runs:
     uses: actions/checkout@v4
     with:
       repository: IABTechLab/uid2-shared-actions
-      ref: v2
+      ref: v3
       path: tmp-vulnerability-scan
 
   - name: Retrieve trivy-secret.yaml

trivy-secret.yaml

@@ -199,7 +199,7 @@ disable-allow-rules:
   - tests
   - examples
   - vendor
-  # - usr-dirs
+  - usr-dirs
   - locale-dir
   - markdown
   - node.js
@@ -213,3 +213,7 @@ allow-rules:
   - id: skip-localstack-kms-seed
     description: Skip localstack KMS seed files
     path: \/.*\/localstack\/kms\/seed.yaml
+
+  - id: skip-site-packages
+    description: Skip site-packages directory
+    path: \/.*\/site-packages\/