From 10d8ae0497c9ecf24e2b2d3c9e636f03d742ae09 Mon Sep 17 00:00:00 2001 From: sean wibisono Date: Thu, 22 Oct 2026 14:56:37 +1100 Subject: [PATCH] UID2-8159: exclude local-only Python sample tests from Trivy scans The Python sample-test project is run only by developers locally; no workflow installs it and the published site is static, so its lockfile findings are noise. Co-Authored-By: Claude Opus 5.5 --- trivy.yaml | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 trivy.yaml diff --git a/trivy.yaml b/trivy.yaml new file mode 100644 index 000000000..cb01d9d12 --- /dev/null +++ b/trivy.yaml @@ -0,0 +1,4 @@ +# Python sample tests run only locally (uv run pytest); nothing in CI or the published site uses them. +scan: + skip-dirs: + - test/python