diff --git a/.trivyignore b/.trivyignore
index 376218d..48f3749 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -7,3 +7,6 @@ AVD-DS-0002
 
 # no update yet. blocking build.
 CVE-2023-4911
+
+# false positive, also covered by hadolint
+AVD-DS-0017