diff --git a/.trivyignore b/.trivyignore
index 7d3f8f0d28..9e43a92487 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -35,4 +35,7 @@ CVE-2022-1996
 GHSA-qq97-vm5h-rrhg
 
 # github.com/dgrijalva/jwt-go -- vulnerable version used by docker/distribution above
-CVE-2020-26160
\ No newline at end of file
+CVE-2020-26160
+
+# github.com/bytecodealliance/wasmtime-go - we don't enable wasm on arm64 builds
+CVE-2022-31169
\ No newline at end of file