From 73bc36e921bafa3a41466776df669b1a0d5014f1 Mon Sep 17 00:00:00 2001
From: Nav <nav@navsplace.net>
Date: Sat, 29 Aug 2026 02:59:55 +0000
Subject: [PATCH] chore(ci): add base image openssl and bundled pacote CVEs to
 .trivyignore

---
 .trivyignore | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.trivyignore b/.trivyignore
index 8e7e7da..3cfc8b2 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -10,3 +10,7 @@ CVE-2026-48815
 CVE-2026-59873
 CVE-2026-59874
 CVE-2026-73566
+# Alpine 3.24 base image: openssl libcrypto3, fixed in alpine 3.5.8-r0 (absorbed on next base image bump)
+CVE-2026-14456
+# npm bundled pacote in node:22-alpine, fixed in npm 21.5.1 (not an app dependency)
+CVE-2026-9496