From d0d79ee1da392b5106fd870a77131b27dd2f70db Mon Sep 17 00:00:00 2001
From: Dan Milne <d@nmilne.com>
Date: Fri, 2 Jan 2026 12:52:24 +1100
Subject: [PATCH] Try ignore capybara's test tripping trivy

---
 .trivyignore | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.trivyignore b/.trivyignore
index c79d3ec..22e3155 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -8,7 +8,8 @@
 
 # Capybara test fixture - not a real private key
 # Ignore secrets in test fixtures
-*/capybara-*/spec/fixtures/key.pem
+# Format: secret:<rule-id>:<exact-file-path>
+secret:private-key:/usr/local/bundle/ruby/3.4.0/gems/capybara-3.40.0/spec/fixtures/key.pem
 
 # =============================================================================
 # Unfixable CVEs - No Patches Available (Status: affected/fix_deferred)