From e65b7fe71cf9bc9b24bd4b6a70cf2eb4f44b3cff Mon Sep 17 00:00:00 2001 From: Stephan Renatus Date: Fri, 9 Sep 2022 14:20:01 +0200 Subject: [PATCH] trivyignore: add wasmtime-go CVE-2022-31169 (#5117) We should still update, but we shouldn't be rushed by this CVE. Signed-off-by: Stephan Renatus --- .trivyignore | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.trivyignore b/.trivyignore index 7d3f8f0d28..9e43a92487 100644 --- a/.trivyignore +++ b/.trivyignore @@ -35,4 +35,7 @@ CVE-2022-1996 GHSA-qq97-vm5h-rrhg # github.com/dgrijalva/jwt-go -- vulnerable version used by docker/distribution above -CVE-2020-26160 \ No newline at end of file +CVE-2020-26160 + +# github.com/bytecodealliance/wasmtime-go - we don't enable wasm on arm64 builds +CVE-2022-31169 \ No newline at end of file