From f43631671ffcf27c83ad3d4507cdca1ecf1782e8 Mon Sep 17 00:00:00 2001
From: Jason Woltje <jason@diversecanvas.com>
Date: Wed, 18 Feb 2026 20:00:31 -0600
Subject: [PATCH] chore(deps): override tar to 7.5.8 for trivy

---
 package.json   | 1 +
 pnpm-lock.yaml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/package.json b/package.json
index d8fc1e5..04bc29f 100644
--- a/package.json
+++ b/package.json
@@ -64,6 +64,7 @@
     "overrides": {
       "@isaacs/brace-expansion": ">=5.0.1",
       "minimatch": ">=10.2.1",
+      "tar": ">=7.5.8",
       "form-data": ">=2.5.4",
       "lodash": ">=4.17.23",
       "lodash-es": ">=4.17.23",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 68cefe9..ff4d621 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7,6 +7,7 @@ settings:
 overrides:
   '@isaacs/brace-expansion': '>=5.0.1'
   minimatch: '>=10.2.1'
+  tar: '>=7.5.8'
   form-data: '>=2.5.4'
   lodash: '>=4.17.23'
   lodash-es: '>=4.17.23'