.trivyignore

# buildx vuln - fixed upstream, no release yet
CVE-2023-2253

# buildx & consul vulns - not relevant here
CVE-2022-41723

# bashbrew - github.com/opencontainers/runc vulns - not relevant here
CVE-2023-27561
CVE-2024-21626

# bashbrew & gomplate - google.golang.org/grpc vuln - not relevant
GHSA-m425-mq94-257g

# docker-buildx - otel vuln - not relevant
CVE-2023-45142
CVE-2023-47108

# rapid reset - most Go bins
CVE-2023-39325

# bashbrew - not relevant
GHSA-9763-4f94-gfch
CVE-2023-49569
CVE-2023-49568
CVE-2023-45288

# golangci-lint - not relevant
CVE-2024-24788

# bashbrew - stdlib vuln in obsolete Go version not relevant though, fixed with update
CVE-2024-24790
CVE-2024-34156
CVE-2025-21613
CVE-2025-21614
CVE-2024-45337
CVE-2024-45338

# buildx - not relevant
CVE-2024-41110

# vault - not relevant
CVE-2025-0377