scan:
skip-files:
# CVE patching of the following things is far behind and out of our control.
- "usr/sbin/gosu"
severity:
- CRITICAL
- HIGH
vulnerability:
ignore-unfixed: true
type:
- os
- library
format: "table"