alighasami
3d5eaf9445
Security: Sync from Public / sync-from-public (push) Has been cancelled
Test: Benchmark Nightly / build (push) Has been cancelled
Test: Benchmark Nightly / Notify Cats on failure (push) Has been cancelled
CI: Python / Checks (push) Has been cancelled
Test: Evals Python / Workflow Comparison Python (push) Has been cancelled
Util: Check Docs URLs / check-docs-urls (push) Has been cancelled
Test: Visual Storybook / Cloudflare Pages (push) Has been cancelled
Test: E2E Performance / build-and-test-performance (push) Has been cancelled
Test: Workflows Nightly / Run Workflow Tests (push) Has been cancelled
Util: Cleanup CI Docker Images / Delete stale CI images (push) Has been cancelled
Test: Benchmark Destroy Env / build (push) Has been cancelled
Util: Update Node Popularity / update-popularity (push) Has been cancelled
Test: E2E Coverage Weekly / Coverage Tests (push) Has been cancelled
15 lines
450 B
Rego
15 lines
450 B
Rego
# Trivy ignore policy for n8n security scans.
|
|
# n8n's own published CVEs/GHSAs are intentionally excluded from internal
|
|
# scan results. Vulnerabilities in the n8n package should be visible to
|
|
# anyone running an older version — they indicate an upgrade is required.
|
|
# VEX (vex.openvex.json) covers third-party dependency false positives only.
|
|
package trivy
|
|
|
|
import future.keywords.if
|
|
|
|
default ignore := false
|
|
|
|
ignore if {
|
|
input.PkgName == "n8n"
|
|
}
|