Cut v0.2.29 with reviewed router scan exception

Author: snapetech

.trivyignore

@@ -0,0 +1,3 @@
+# React Router's RSC/server-action advisory is not applicable: slskR ships
+# BrowserRouter client routing only and no RSC/server-action runtime.
+GHSA-qwww-vcr4-c8h2

packaging/aur/PKGBUILD

@@ -1,5 +1,5 @@
 pkgname=slskr
-pkgver=0.2.28
+pkgver=0.2.29
 pkgrel=2
 pkgdesc='Rust Soulseek daemon with bundled Web UI'
 arch=('x86_64' 'aarch64')

packaging/aur/PKGBUILD-bin

@@ -1,5 +1,5 @@
 pkgname=slskr-bin
-pkgver=0.2.28
+pkgver=0.2.29
 pkgrel=2
 pkgdesc='Rust Soulseek daemon with bundled Web UI'
 arch=('x86_64' 'aarch64')

scripts/run-security-scans.sh

@@ -82,8 +82,12 @@ run_semgrep() {
 }
 
 run_trivy() {
+  local ignore_args=()
+  if [[ -f "$repo_root/.trivyignore" ]]; then
+    ignore_args+=(--ignorefile "$repo_root/.trivyignore")
+  fi
   if command -v trivy >/dev/null 2>&1; then
-    run_or_record "Trivy filesystem scan" trivy fs --severity HIGH,CRITICAL --exit-code 1 --ignore-unfixed .
+    run_or_record "Trivy filesystem scan" trivy fs --severity HIGH,CRITICAL --exit-code 1 --ignore-unfixed "${ignore_args[@]}" .
     return
   fi
 
@@ -98,7 +102,7 @@ run_trivy() {
       -v "$repo_root:/src" \
       -w /src \
       "$trivy_image" \
-      fs --severity HIGH,CRITICAL --exit-code 1 --ignore-unfixed .
+      fs --severity HIGH,CRITICAL --exit-code 1 --ignore-unfixed "${ignore_args[@]}" .
     return
   fi