fix it

Author: anthony-nhs

.github/workflows/build_all_images.yml

@@ -56,6 +56,7 @@ jobs:
       container_name: ${{ matrix.container_name }}
       base_folder: "base_node"
       NO_CACHE: ${{ inputs.NO_CACHE }}
+      EXTRA_COMMON: "common_node_24"
   package_node_24_language_docker_images:
     needs:
       - package_base_docker_image

README.md

@@ -229,8 +229,9 @@ CONTAINER_NAME=base \
 Base node 24 image
 ```
 CONTAINER_NAME=node_24 \
-  BASE_FOLDER=languages \
+  BASE_FOLDER=base_node \
   IMAGE_TAG=local-build \
+  EXTRA_COMMON=common_node_24 \
   make scan-image
 ```
 Language images

src/base_node/node_24/.trivyignore.yaml

@@ -30,3 +30,8 @@ vulnerabilities:
     purls:
       - "pkg:npm/tar@7.5.1"
     expired_at: 2026-08-18
+  - id: CVE-2026-26960
+    statement: "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction"
+    purls:
+      - "pkg:npm/tar@7.5.1"
+    expired_at: 2026-08-18