diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 0000000000..149e4a18f7
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,3 @@
+# Ignoring this CVE since we've got mitigations for it and we need to use this
+# version because of a regression
+CVE-2023-47108