diff --git a/.github/workflows/trivy-analysis.yml b/.github/workflows/trivy-analysis.yml
index ce9d38e8dae6..b72c9008b88f 100644
--- a/.github/workflows/trivy-analysis.yml
+++ b/.github/workflows/trivy-analysis.yml
@@ -36,6 +36,7 @@ jobs:
           ignore-unfixed: true
           version: v0.57.1
           timeout: 15m
+          vuln-type: os,library
         env:
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db
diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 000000000000..f06d3b535f3d
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,35 @@
+__CVE-2015-6420  # commons-collections:commons-collections
+__CVE-2015-7501  # commons-collections:commons-collections
+__CVE-2019-17571 # log4j:log4j
+__CVE-2020-11022 # jquery
+__CVE-2020-11023 # jquery
+__CVE-2020-15522 # org.bouncycastle:bcprov-jdk15on
+__CVE-2020-35510 # org.jboss.remoting:jboss-remoting
+__CVE-2021-4104  # log4j:log4j
+__CVE-2021-41973 # org.apache.mina:mina-core
+__CVE-2022-23302 # log4j:log4j
+__CVE-2022-23305 # log4j:log4j
+__CVE-2022-23307 # log4j:log4j
+__CVE-2022-4065  # org.testng:testng
+__CVE-2023-1973  # io.undertow:undertow-core
+__CVE-2023-26464 # log4j:log4j
+__CVE-2023-33201 # org.bouncycastle:bcprov-jdk15on
+__CVE-2023-33202 # org.bouncycastle:bcprov-jdk15on
+__CVE-2023-4639  # io.undertow:undertow-core
+__CVE-2023-5685  # org.jboss.xnio:xnio-api
+__CVE-2024-1459  # io.undertow:undertow-core
+__CVE-2024-1635  # io.undertow:undertow-core
+__CVE-2024-29857 # org.bouncycastle:bcprov-jdk15on
+__CVE-2024-30171 # org.bouncycastle:bcprov-jdk15on
+__CVE-2024-3653  # io.undertow:undertow-core
+__CVE-2024-52046 # org.apache.mina:mina-core
+__CVE-2024-5971  # io.undertow:undertow-core
+__CVE-2024-6162  # io.undertow:undertow-core
+__CVE-2024-6485  # bootstrap
+__CVE-2024-7885  # io.undertow:undertow-core
+__CVE-2025-11965 # io.vertx:vertx-web
+__CVE-2025-1647  # bootstrap
+__CVE-2025-48924 # commons-lang:commons-lang
+__CVE-2025-5731  # org.infinispan:infinispan-cli-client
+__CVE-2025-59250 # com.microsoft.sqlserver:mssql-jdbc
+__CVE-2025-9784  # io.undertow:undertow-core
\ No newline at end of file