Merge pull request #214 from cartsnitch/fix/car-620-grype-ignore-and-cache-bust

fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers
This commit is contained in:
cartsnitch-cto[bot]
2026-04-18 03:55:06 +00:00
committed by GitHub
+4
View File
@@ -0,0 +1,4 @@
ignore:
# Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely
- vulnerability: CVE-2025-13836
- vulnerability: CVE-2026-4519