Trivy: Ignore bom.cdx.json from Python pip package.

kratz00 · kratz00 · commit 65a6a5fdae29 · 2026-08-03T15:45:03.000+02:00
Signed-off-by: Steffen Pankratz &lt;steffen.pankratz@exasol.com&gt;
diff --git a/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.yaml b/flavors/template-Exasol-8-python-3.10-cuda-conda/flavor_base/security_scan/trivy.yaml
@@ -1,4 +1,5 @@
 scan:
   skip-files:
     - /usr/bin/trivy
+    - /opt/conda/lib/python*/site-packages/pip/_vendor/bom.cdx.json
 ignore-policy: /trivy.rego
diff --git a/flavors/template-Exasol-8-python-3.12-cuda-conda/flavor_base/security_scan/trivy.yaml b/flavors/template-Exasol-8-python-3.12-cuda-conda/flavor_base/security_scan/trivy.yaml
@@ -1,4 +1,5 @@
 scan:
   skip-files:
     - /usr/bin/trivy
+    - /opt/conda/lib/python*/site-packages/pip/_vendor/bom.cdx.json
 ignore-policy: /trivy.rego
diff --git a/flavors/template-Exasol-all-python-3.10-conda/flavor_base/security_scan/trivy.yaml b/flavors/template-Exasol-all-python-3.10-conda/flavor_base/security_scan/trivy.yaml
@@ -1,4 +1,5 @@
 scan:
   skip-files:
     - /usr/bin/trivy
+    - /opt/conda/lib/python*/site-packages/pip/_vendor/bom.cdx.json
 ignore-policy: /trivy.rego
diff --git a/flavors/template-Exasol-all-python-3.12-conda/flavor_base/security_scan/trivy.yaml b/flavors/template-Exasol-all-python-3.12-conda/flavor_base/security_scan/trivy.yaml
@@ -1,4 +1,5 @@
 scan:
   skip-files:
     - /usr/bin/trivy
+    - /opt/conda/lib/python*/site-packages/pip/_vendor/bom.cdx.json
 ignore-policy: /trivy.rego
diff --git a/flavors/test-Exasol-8-cuda-ml/flavor_base/security_scan/trivy.yaml b/flavors/test-Exasol-8-cuda-ml/flavor_base/security_scan/trivy.yaml
@@ -1,4 +1,5 @@
 scan:
   skip-files:
     - /usr/bin/trivy
+    - /opt/conda/lib/python*/site-packages/pip/_vendor/bom.cdx.json
 ignore-policy: /trivy.rego
