From 093334cdc2045b8521f0073163b1b7b6904adc68 Mon Sep 17 00:00:00 2001
From: Thomas Ubensee <34603111+tomuben@users.noreply.github.com>
Date: Wed, 3 Jun 2026 10:23:43 -0300
Subject: [PATCH] #1464: Ignored maven settings.xml for security scanner
 (#1465)

fixes #1464
---
 doc/changes/changes_11.2.0.md                                  | 1 +
 .../flavor_base/security_scan/trivy-secret.yaml                | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/doc/changes/changes_11.2.0.md b/doc/changes/changes_11.2.0.md
index 16aaf492b..9d12c8aed 100644
--- a/doc/changes/changes_11.2.0.md
+++ b/doc/changes/changes_11.2.0.md
@@ -32,6 +32,7 @@ n/a
  - #1369: Added missing tests for context
  - #1380: Removed unused scripts and files
  - #1422: Fixed JAVA_HOME path
+ - #1464: Ignored maven settings.xml for security scanner
 
 
 ## Dependencies
diff --git a/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy-secret.yaml b/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy-secret.yaml
index 86e881df0..711ab4d73 100644
--- a/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy-secret.yaml
+++ b/flavors/standard-EXASOL-all/flavor_base/security_scan/trivy-secret.yaml
@@ -2,3 +2,6 @@ allow-rules:
   - id: r-open-ssl-samples
     description: skip R open ssl sample secrets
     path: usr/local/lib/R/site-library/openssl/doc/*
+  - id: maven-sample
+    description: skip maven settings xml template from APT package
+    path: etc/maven/settings.xml