diff --git a/.github/workflows/trivy-analysis.yml b/.github/workflows/trivy-analysis.yml
index ce9d38e8dae6..f8a2d0e0cc12 100644
--- a/.github/workflows/trivy-analysis.yml
+++ b/.github/workflows/trivy-analysis.yml
@@ -33,6 +33,7 @@ jobs:
           format: sarif
           output: trivy-results.sarif
           severity: MEDIUM,CRITICAL,HIGH
+          vulnType: os,library
           ignore-unfixed: true
           version: v0.57.1
           timeout: 15m
diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 000000000000..bc372c40a69c
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,7 @@
+CVE-2015-7501
+CVE-2019-17571
+CVE-2022-23305
+CVE-2022-23307
+CVE-2022-4492
+CVE-2022-45047
+CVE-2024-52046
\ No newline at end of file