From fb7b88c0d691cb2e34fe4e949ee5f2c8449dee35 Mon Sep 17 00:00:00 2001
From: Luke Heath <luke@fleetdm.com>
Date: Tue, 26 May 2026 12:52:34 -0500
Subject: [PATCH] Skip smtp4dev dev TLS key in Trivy secret scanner (#46205)

---
 .github/workflows/trivy-scan.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index f69367c45f..71827c335c 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -138,9 +138,11 @@ jobs:
           # - website/config/custom.js: commented-out Stripe test-mode placeholders shown as example config.
           # - ee/fleet-agent-downloader/config/custom.js: same Sails template, commented-out Stripe test placeholders.
           # - tools/test-orbit-mtls/client.key: client private key used only by local/test mTLS tooling.
+          # - tools/smtp4dev/fleet.key: TLS key for the local smtp4dev development mail server.
           skip-files: |
             tools/osquery/in-a-box/osquery/fleet.key
             tools/osquery/fleet.key
+            tools/smtp4dev/fleet.key
             orbit/pkg/insecure/proxy.go
             ee/orbit/pkg/httpsigproxy/httpsigproxy.go
             website/config/custom.js