You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
amcrest2mqtt/.github
Jeff Culverhouse 21925c5688 chore: enhance Trivy security scanning configuration
- Add ignore-unfixed: true to Trivy workflow to focus on actionable vulnerabilities
- Expand .trivyignore from 1 to 10 CVEs with detailed categorization
- Document why each CVE is ignored (system libraries, unused features)
- Ignore glibc/libtasn1 system library CVEs pending upstream fixes
- Ignore curl CVEs for SSH/OAuth2/LDAP features not used by application
- Ignore OpenLDAP CVE as library is not used by amcrest2mqtt

This aligns with govee2mqtt security configuration and reduces noise
from unfixable or non-applicable security alerts while maintaining
focus on CRITICAL and HIGH severity issues that can be addressed.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2 weeks ago
..
workflows chore: enhance Trivy security scanning configuration 2 weeks ago
FUNDING.yml fix funding file from fork 11 months ago
SECURITY.md feat: add image signing, vulnerability scanning, and security policy 1 month ago
dependabot.yml [ci skip] Update dependabot 5 years ago