fix: [#384] Create groups.

.github/workflows/trivy.yml

@@ -20,6 +20,7 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os,library'
           severity: 'CRITICAL,HIGH'
+          trivyignores: ../../.trivyignore
       - name: Run Trivy vulnerability scanner in fs mode
         uses: aquasecurity/[email protected]
         with:
@@ -28,3 +29,4 @@ jobs:
           exit-code: '1'
           ignore-unfixed: true
           severity: 'CRITICAL,HIGH'
+          trivyignores: ../../.trivyignore

.trivyignore

@@ -0,0 +1,3 @@
+# upgrading to libcrypto3=3.1.4-r0 breaks apk-tools and no newer version
+# available of latter package.
+CVE-2023-5363

Dockerfile

@@ -13,8 +13,5 @@ FROM alpine:3.18.4
 COPY --from=builder /etc/passwd /etc/passwd
 COPY --from=builder /n3dr /usr/local/bin/n3dr
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
-RUN apk add --no-cache \
-    libcrypto3=3.1.4-r0 \
-    libssl3=3.1.4-r0
 USER n3dr
 ENTRYPOINT ["/usr/local/bin/n3dr"]