cert-manager/.trivyignore
Ashley Davis 14be70b77a
ignore CVE-2020-8559 in trivy scans
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
2024-04-25 09:58:47 +01:00

5 lines
338 B
Plaintext

# CVE-2020-8559 is a vuln in old Kubernetes versions which seems to be incorrectly flagged by trivy. It seems like
# the version detection is wrongly looking at apiserver packages with versions < 1 - but all apiserver packages have
# a major version of 0. In any case this is a vuln in Kubernetes clusters, not in our code.
CVE-2020-8559