AEA-5986 Add tar to trivy ignore.

originalphil · originalphil · commit 7d55ea8bcc04 · 2026-03-05T10:21:59.000Z
diff --git a/.trivyignore.yaml b/.trivyignore.yaml
@@ -25,3 +25,6 @@ vulnerabilities:
   - id: CVE-2026-26960
     statement: tar vulnerability accepted as risk
     expired_at: 2026-06-01
+  - id: GHSA-qffp-2rhf-9h96
+    statement: tar vulnerability accepted as risk - dependency of npm (multiple)
+    expired_at: 2026-06-01
