.trivyignore

# https://trivy.dev/docs/latest/guide/configuration/filtering/#suppression

# 09-Jul-2026
# ┌─────────────────────┬───────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
# │       Library       │ Vulnerability │ Severity │  Status  │ Installed Version │ Fixed Version │                          Title                           │
# ├─────────────────────┼───────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
# │ golang.org/x/crypto │ GO-2026-5932  │ UNKNOWN  │ affected │ v0.54.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained, │
# │                     │               │          │          │                   │               │ unsafe by design, and has known security...              │
# └─────────────────────┴───────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘
#
# > govulncheck -show verbose ./... | sed -n '/=== Module Results ===/,$p'
# === Module Results ===
#
# Vulnerability #1: GO-2026-5932
#     The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design,
#     and has known security issues
#   More info: https://pkg.go.dev/vuln/GO-2026-5932
#   Module: golang.org/x/crypto
#     Found in: golang.org/x/crypto@v0.54.0
#     Fixed in: N/A
#
# Your code is affected by 0 vulnerabilities.
# This scan also found 0 vulnerabilities in packages you import and 1
# vulnerability in modules you require, but your code doesn't appear to call these
# vulnerabilities.
GO-2026-5932