You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@iceberg.apache.org by pv...@apache.org on 2026/07/23 11:03:20 UTC

(iceberg) branch main updated: Build: Fix Trivy failures (#17344)

This is an automated email from the ASF dual-hosted git repository.

pvary pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg.git


The following commit(s) were added to refs/heads/main by this push:
     new 72145bfae6 Build: Fix Trivy failures (#17344)
72145bfae6 is described below

commit 72145bfae613a2e6fb04e10952b9b63f653df659
Author: pvary <pe...@gmail.com>
AuthorDate: Thu Jul 23 13:03:13 2026 +0200

    Build: Fix Trivy failures (#17344)
---
 .github/trivyignore/kafka-connect-runtime.trivyignore | 1 +
 .github/trivyignore/spark-runtime-3.5.trivyignore     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/trivyignore/kafka-connect-runtime.trivyignore b/.github/trivyignore/kafka-connect-runtime.trivyignore
index 2da8c6d2f4..b646c996b0 100644
--- a/.github/trivyignore/kafka-connect-runtime.trivyignore
+++ b/.github/trivyignore/kafka-connect-runtime.trivyignore
@@ -27,3 +27,4 @@
 # >= 2.21.4 / 2.18.8.
 CVE-2026-54512
 CVE-2026-54513
+GHSA-r7wm-3cxj-wff9
diff --git a/.github/trivyignore/spark-runtime-3.5.trivyignore b/.github/trivyignore/spark-runtime-3.5.trivyignore
index a8f4671634..46d764fe8b 100644
--- a/.github/trivyignore/spark-runtime-3.5.trivyignore
+++ b/.github/trivyignore/spark-runtime-3.5.trivyignore
@@ -25,3 +25,4 @@
 # jackson-databind CVEs that are only fixed in jackson >= 2.18.8.
 CVE-2026-54512
 CVE-2026-54513
+GHSA-r7wm-3cxj-wff9