diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 000000000000..3ccb76e49e15
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,4 @@
+// netty-handler
+CVE-2025-24970
+// libcrypto
+CVE-2024-12797
\ No newline at end of file