add trivy ignore

anthony-nhs · anthony-nhs · commit 1273e0c5d9b2 · 2026-01-30T13:16:12.000Z
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
@@ -0,0 +1,6 @@
+vulnerabilities:
+  - id: CVE-2026-24842
+    paths:
+      - "package-lock.json"
+    statement: downstream dependency for tar - waiting for new npm release
+    expired_at: 2026-06-01
diff --git a/trivy.yaml b/trivy.yaml
@@ -0,0 +1 @@
+ignorefile: ".trivyignore.yaml"
