Merge pull request #214 from cartsnitch/fix/car-620-grype-ignore-and-cache-bust

fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers
2026-04-18 03:55:06 +00:00
parent 46724b1db9 cd7421de90
commit 90eb37b3c0
1 changed files with 4 additions and 0 deletions
@@ -0,0 +1,4 @@
+ignore:
+  # Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely
+  - vulnerability: CVE-2025-13836
+  - vulnerability: CVE-2026-4519