Skip to content

Commit d45cc39

Browse files
Update .trivyignore to reflect current vulnerability status for OpenResty image
Signed-off-by: Jacob Woffenden <jacob.woffenden@justice.gov.uk>
1 parent a1cd37b commit d45cc39

File tree

1 file changed

+1
-18
lines changed

1 file changed

+1
-18
lines changed

.trivyignore

Lines changed: 1 addition & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1 @@
1-
# I am skipping these CVEs because while they are fixed in APK, I do not want to run `apk update && apk upgrade` as the image won't be reproducible
2-
# We currently consume docker.io/openresty/openresty:1.25.3.2-alpine-fat but intend to refactor and switch to Ubuntu LTS for two reasons
3-
# 1. We can fully control the base image, so nonroot and package version
4-
# 2. OpenResty publish an APT distrobution we can use
5-
# CVE-2024-5171
6-
# CVE-2024-6197
7-
# CVE-2024-8176
8-
# CVE-2024-45490
9-
# CVE-2024-45491
10-
# CVE-2024-45492
11-
# CVE-2024-55549
12-
# CVE-2024-56171
13-
# CVE-2025-0840
14-
# CVE-2025-24855
15-
# CVE-2025-24928
16-
# CVE-2025-27113
17-
# CVE-2024-56406
18-
# CVE-2025-31115
1+
# As of 03/06/2025 there are no vulnerabilities to skip in docker.io/openresty/openresty:1.27.1.2-1-alpine-fat

0 commit comments

Comments
 (0)