fix(ci): suppress Next.js bundled tar/minimatch CVEs in trivy (#431)

Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>
2026-02-21 20:40:17 +00:00
parent c23ebca648
commit d66451cf48
4 changed files with 11 additions and 5 deletions
--- a/.woodpecker/api.yml
+++ b/.woodpecker/api.yml
@@ -15,6 +15,7 @@ when:
        - "turbo.json"
        - "package.json"
        - ".woodpecker/api.yml"
+        - ".trivyignore"

 variables:
  - &node_image "node:24-alpine"