From 2122ef24370fd66e144d0e8f78a7930d88d3557f Mon Sep 17 00:00:00 2001
From: devops <devops@local>
Date: Wed, 16 Sep 2026 14:00:49 +0000
Subject: [PATCH] fix: Trivy ignorefile ko DooD host path se mount karo

---
 Jenkinsfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index a9fd7bb..0483aee 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -124,10 +124,12 @@ print('  Vault se registry creds mil gaye (user=%s)' % d['username'])
                 sh '''
                     # GATE hai, report nahi: HIGH/CRITICAL mila to build yahin fail hogi.
                     # Jo CVE business ne accept kiye hain wo .trivyignore me hain.
+                    # DooD: docker daemon host ka hai, isliye workspace ka host path chahiye.
+                    HOST_WS=$(echo "$PWD" | sed "s|^${JENKINS_HOME_CONTAINER}|${JENKINS_HOME_HOST}|")
                     docker run --rm \
                       -v /var/run/docker.sock:/var/run/docker.sock \
                       -v trivy-cache:/root/.cache/ \
-                      -v "$PWD/.trivyignore:/.trivyignore:ro" \
+                      -v "$HOST_WS/.trivyignore":/.trivyignore:ro \
                       aquasec/trivy:0.58.1 image \
                         --severity ${TRIVY_SEVERITY} \
                         --ignore-unfixed \