This PR is generated by scripts/grype-triage.sh from the current published image plus a base-image scan. The build-scan-push gate ignores exactly this list, so it fails only when a fix becomes reachable from something we can build.
Accepted — 0 (fix published, not reachable yet)
none
Removed — 1 (no longer reported)
CVE-2026-93990
Entries leave this list automatically once Renovate can reach a fix, or a rebuild clears them.
This PR is generated by `scripts/grype-triage.sh` from the current published image plus a base-image scan. The `build-scan-push` gate ignores exactly this list, so it fails only when a fix becomes reachable from something we can build.
### Accepted — 0 (fix published, not reachable yet)
- _none_
### Removed — 1 (no longer reported)
- `CVE-2026-93990`
Entries leave this list automatically once Renovate can reach a fix, or a rebuild clears them.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR is generated by
scripts/grype-triage.shfrom the current published image plus a base-image scan. Thebuild-scan-pushgate ignores exactly this list, so it fails only when a fix becomes reachable from something we can build.Accepted — 0 (fix published, not reachable yet)
Removed — 1 (no longer reported)
CVE-2026-93990Entries leave this list automatically once Renovate can reach a fix, or a rebuild clears them.