Trivy ignores

Author: MatthewPopat-NHS

.trivyignore.yaml

@@ -11,6 +11,9 @@ vulnerabilities:
   - id: CVE-2026-24842
     statement: downstream dependency for tar - waiting for new npm release
     expired_at: 2026-06-01
+  - id: CVE-2026-25547
+    statement: downstream dependency for @isaacs/brace-expansion - waiting for new npm release
+    expired_at: 2026-06-01
   - id: CVE-2026-24049
     statement: downstream dependency for wheel - waiting for new python release
     expired_at: 2026-06-01