Commit Graph

1 Commits

Author SHA1 Message Date
steve c371b9a04f ci: suppress 3 unfixed Debian CVEs via .trivyignore
CVE-2025-69720 (ncurses), CVE-2026-27135 (nghttp2), and CVE-2026-29111
(systemd) have no upstream fix available. .trivyignore suppresses them
so Trivy can still gate on all other CRITICAL/HIGH findings without
relying on the coarser ignore-unfixed flag in the workflow.
2026-05-03 09:35:38 -06:00