How can we avoid having a CVE multiple times ?

[TheTricky65]

Discussed in #8085

^{Originally posted by TheTricky65 December 12, 2024}

Description

I am trying to use Trivy into our pipelines and one one issue we face is that we have a built-in security gate that prevents the pipeline to continue if the scan result has let's say more than 5 medium for example.
But in some cases we have 4 times the same CVE ID and another one , so the result of the 2 unique CVEs should pass the gate whereas here it doesn't.
What would be the best way to tackle this issue according to you ?

Target

Container Image

Scanner

Vulnerability

[github-actions]

Please see https://aquasecurity.github.io/trivy/latest/community/contribute/issue/