support-embedded-postgres-cli/trivy.yaml

scan:
  skip-files:
    - "usr/sbin/gosu" # CVE patching is far behind and out of our control.
    - "app/gogs/gogs" # False positives on main builds

severity:
  - CRITICAL
  - HIGH

vulnerability:
  ignore-unfixed: true
  type:
    - os
    - library

format: "table"
Dockerfile: update base image to alpine3.21 and enable trivy scan (#7863) ## Describe the pull request Link to the issue: fixes https://github.com/gogs/gogs/issues/6674 2024-12-20 22:33:46 -05:00			`scan:`
			`skip-files:`
chore: update Trivy scan config (#7934) 2025-03-04 23:07:09 -05:00			`- "usr/sbin/gosu" # CVE patching is far behind and out of our control.`
			`- "app/gogs/gogs" # False positives on main builds`
Dockerfile: update base image to alpine3.21 and enable trivy scan (#7863) ## Describe the pull request Link to the issue: fixes https://github.com/gogs/gogs/issues/6674 2024-12-20 22:33:46 -05:00
			`severity:`
			`- CRITICAL`
			`- HIGH`

			`vulnerability:`
			`ignore-unfixed: true`
			`type:`
			`- os`
			`- library`

			`format: "table"`