From 3e70533e1d17dee79779bafb6ed919f9a5b91094 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Thu, 31 Aug 2023 11:26:01 +0300 Subject: [PATCH] .trivyignore: ignore HostPath issue Signed-off-by: Tuomas Katila --- .trivyignore | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.trivyignore b/.trivyignore index c75ce363..aaf1192c 100644 --- a/.trivyignore +++ b/.trivyignore @@ -24,5 +24,9 @@ AVD-KSV-0047 # device plugin operator requires access to daemonset creation etc. AVD-KSV-0048 +# HostPath present many security risks and as a security practice it is better to avoid critical host paths mounts. +# Some plugins require access to various host paths +AVD-KSV-0121 + # Device plugins do not use any CSIs ## CVE-2019-11255