The #trivy thing is an absolute train wreck. There's an irony that I did some work to drop n8n because it was putting out too many CVEs, but now I've had to back out our CVE checks completely because trivy has thrown itself under a bus.