fix(ci): suppress Next.js bundled tar/minimatch CVEs in trivy (#431)

Co-authored-by: Jason Woltje <[email protected]> Co-committed-by: Jason Woltje <[email protected]>
2026-02-21 20:40:17 +00:00
parent c23ebca648
commit d66451cf48
4 changed files with 11 additions and 5 deletions
@@ -15,6 +15,7 @@ when:
        - "turbo.json"
        - "package.json"
        - ".woodpecker/api.yml"
+        - ".trivyignore"

 variables:
  - &node_image "node:24-alpine"
@@ -15,6 +15,7 @@ when:
        - "turbo.json"
        - "package.json"
        - ".woodpecker/orchestrator.yml"
+        - ".trivyignore"

 variables:
  - &node_image "node:24-alpine"
@@ -15,6 +15,7 @@ when:
        - "turbo.json"
        - "package.json"
        - ".woodpecker/web.yml"
+        - ".trivyignore"

 variables:
  - &node_image "node:24-alpine"