Merge remote-tracking branch 'origin/main' into custom_nag_pack

Author: anthony-nhs

.trivyignore.yaml

@@ -23,3 +23,12 @@ vulnerabilities:
   - id: CVE-2025-61729
     statement: downstream dependency for asdf/go - waiting for new asdf release
     expired_at: 2026-06-01
+  - id: CVE-2025-61726
+    statement: downstream dependency for asdf/go - waiting for new asdf release
+    expired_at: 2026-06-01
+  - id: CVE-2025-61728
+    statement: downstream dependency for asdf/go - waiting for new asdf release
+    expired_at: 2026-06-01
+  - id: CVE-2026-25128
+    statement: downstream dependency for fast-xml-parser - waiting for aws-sdk release
+    expired_at: 2026-06-01