Try ignore capybara's test tripping trivy

2026-01-02 12:52:24 +11:00
parent 2f6a2c7406
commit d0d79ee1da
1 changed files with 2 additions and 1 deletions
--- a/.trivyignore
+++ b/.trivyignore
@@ -8,7 +8,8 @@

 # Capybara test fixture - not a real private key
 # Ignore secrets in test fixtures
-*/capybara-*/spec/fixtures/key.pem
+# Format: secret:<rule-id>:<exact-file-path>
+secret:private-key:/usr/local/bundle/ruby/3.4.0/gems/capybara-3.40.0/spec/fixtures/key.pem

 # =============================================================================
 # Unfixable CVEs - No Patches Available (Status: affected/fix_deferred)