trivy: Ignore 'nic_sampler' executable

kratz00 · kratz00 · commit 49a6aefb6039 · 2026-08-05T15:34:44.000+02:00
Signed-off-by: Steffen Pankratz &lt;steffen.pankratz@exasol.com&gt;
diff --git a/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/.trivyignore
@@ -1,13 +0,0 @@
-CVE-2025-47907 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-47906 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2020-11979 #Caused by cuda-nvvp 12.9.79 which is already latest version. Can be removed when updating CUDA Version. Ignoring for now.
-CVE-2025-47912 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58183 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58185 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58186 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58187 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58188 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58189 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61723 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61724 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61725 #This affects nsight-compute version 2025.2.1. Ignoring for now
diff --git a/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.yaml b/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.yaml
@@ -2,4 +2,5 @@ scan:
   skip-files:
     - /usr/bin/trivy
     - "**/pip/_vendor/bom.cdx.json"
+    - "**/nsight-compute*/host/target-linux-x64/plugins/efa_metrics/nic_sampler"
 ignore-policy: /trivy.rego
diff --git a/flavors/template-Exasol-8-python-3.12-cuda-conda/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-8-python-3.12-cuda-conda/flavor_base/security_scan/.trivyignore
@@ -1,13 +0,0 @@
-CVE-2025-47907 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-47906 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2020-11979 #Caused by cuda-nvvp 12.9.79 which is already latest version. Can be removed when updating CUDA Version. Ignoring for now.
-CVE-2025-47912 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58183 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58185 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58186 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58187 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58188 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58189 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61723 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61724 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61725 #This affects nsight-compute version 2025.2.1. Ignoring for now
diff --git a/flavors/template-Exasol-8-python-3.12-cuda-conda/flavor_base/security_scan/trivy.yaml b/flavors/template-Exasol-8-python-3.12-cuda-conda/flavor_base/security_scan/trivy.yaml
@@ -2,4 +2,5 @@ scan:
   skip-files:
     - /usr/bin/trivy
     - "**/pip/_vendor/bom.cdx.json"
+    - "**/nsight-compute*/host/target-linux-x64/plugins/efa_metrics/nic_sampler"
 ignore-policy: /trivy.rego
diff --git a/flavors/test-Exasol-8-cuda-ml/flavor_base/security_scan/.trivyignore b/flavors/test-Exasol-8-cuda-ml/flavor_base/security_scan/.trivyignore
@@ -1,13 +0,0 @@
-CVE-2025-47907 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-47906 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2020-11979 #Caused by cuda-nvvp 12.9.79 which is already latest version. Can be removed when updating CUDA Version. Ignoring for now.
-CVE-2025-47912 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58183 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58185 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58186 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58187 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58188 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-58189 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61723 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61724 #This affects nsight-compute version 2025.2.1. Ignoring for now
-CVE-2025-61725 #This affects nsight-compute version 2025.2.1. Ignoring for now
diff --git a/flavors/test-Exasol-8-cuda-ml/flavor_base/security_scan/trivy.yaml b/flavors/test-Exasol-8-cuda-ml/flavor_base/security_scan/trivy.yaml
@@ -2,4 +2,5 @@ scan:
   skip-files:
     - /usr/bin/trivy
     - "**/pip/_vendor/bom.cdx.json"
+    - "**/nsight-compute*/host/target-linux-x64/plugins/efa_metrics/nic_sampler"
 ignore-policy: /trivy.rego
