Add trivyignore

Signed-off-by: galal-hussein <[email protected]>

.github/workflows/build.yml

@@ -35,6 +35,7 @@ jobs:
         ignore-unfixed: true
         vuln-type: 'os,library'
         severity: 'CRITICAL,HIGH'
+        trivyignores: '.trivyignore'
 
   build-arm64:
     runs-on: ubuntu-latest
@@ -70,4 +71,5 @@ jobs:
         exit-code: '1'
         ignore-unfixed: true
         vuln-type: 'os,library'
-        severity: 'CRITICAL,HIGH'
+        severity: 'CRITICAL,HIGH'
+        trivyignores: '.trivyignore'

.trivyignore

@@ -0,0 +1,7 @@
+# Upstream CVEs
+# CVE-2023-47108 opentelemetry cve
+CVE-2023-47108
+# CVE-2023-39325 x/net cve
+CVE-2023-39325 
+# GHSA-m425-mq94-257g grpc cve
+GHSA-m425-mq94-257g

Dockerfile

@@ -11,8 +11,8 @@ RUN set -x && \
     make
 # setup the build
 ARG PKG=go.etcd.io/etcd
-ARG SRC=github.com/galal-hussein/etcd
-ARG TAG="v3.5.9-k3s2"
+ARG SRC=github.com/rancher/etcd
+ARG TAG="v3.5.9-k3s1"
 ARG ARCH="amd64"
 RUN git clone --depth=1 https://${SRC}.git $GOPATH/src/${PKG}
 WORKDIR $GOPATH/src/${PKG}