Ignore Known Trivy Vulnerabilities (#1413)

Author: TimPansino

.github/.trivyignore

@@ -0,0 +1,9 @@
+# =======================
+# Ignored Vulnerabilities
+# =======================
+
+# Accepting risk due to Python 3.7 and 3.8 support.
+CVE-2025-50181
+
+# Not relevant, only affects Pyodide
+CVE-2025-50182

.github/workflows/trivy.yml

@@ -43,6 +43,7 @@ jobs:
           format: table
           exit-code: 1
           severity: "CRITICAL,HIGH,MEDIUM,LOW"
+          trivyignores: ".github/.trivyignore"
 
       - name: Run Trivy vulnerability scanner in repo mode
         if: ${{ github.event_name == 'schedule' }}
@@ -53,6 +54,7 @@ jobs:
           format: "sarif"
           output: "trivy-results.sarif"
           severity: "CRITICAL,HIGH,MEDIUM,LOW"
+          trivyignores: ".github/.trivyignore"
 
       - name: Upload Trivy scan results to GitHub Security tab
         if: ${{ github.event_name == 'schedule' }}