.grype.yaml

ignore:
  # For grype configuration, see https://github.com/anchore/grype#specifying-matches-to-ignore

  # Disputed scanner issue https://github.com/anchore/grype/issues/504
  - vulnerability: CVE-2002-0493
  - vulnerability: CVE-2013-2185
  - vulnerability: CVE-2016-5425
  - vulnerability: CVE-2016-6325
  - vulnerability: CVE-2020-8022
  - vulnerability: CVE-2022-42800
  - vulnerability: CVE-2024-34156
  - vulnerability: CVE-2024-34158

  # https://nvd.nist.gov/vuln/detail/CVE-2020-35527  https://ubuntu.com/security/CVE-2020-35527
  # In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
  # SQLite is not leverage by this image. A fix appears to be in progress.
  - vulnerability: CVE-2020-35527
    fix-state: "not-fixed"

  # https://nvd.nist.gov/vuln/detail/CVE-2024-24791  https://ubuntu.com/security/CVE-2024-24791
  # net/http libraries from GoLang are not utilized in this image.
  - vulnerability: CVE-2024-24791