Merge pull request #5473 from AzeemMuzammil/2201.8.x-skip-trivy-check

Ignore netty-codec & bouncycastle vulnerabilities for 2201.8.7 release
ballerina-platform · Jun 25, 2024 · d996de1 · d996de1
2 parents 91df4af + 95a63fc
commit d996de1
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.trivyignore b/.trivyignore
@@ -9,5 +9,14 @@ CVE-2023-4586
 CVE-2020-8908
 CVE-2024-25710
 CVE-2024-26308
+CVE-2024-29025
 # apache-mime4j-core dependency vulerability (remove once the fixed version for Axiom API is delivered)
 CVE-2024-21742
+# bouncycastle vulnerability (remove when patch is added)
+CVE-2024-29857
+CVE-2024-30171
+CVE-2024-30172
+CVE-2024-29857
+CVE-2024-30171
+CVE-2024-30172
+CVE-2024-34447