feat(studio): delete persisted operations

.github/actions/image-scan/action.yaml

@@ -9,10 +9,6 @@ inputs:
     description: 'GitHub Token'
     required: true
 
-  skip_dirs:
-    description: 'A comma separated list of folders to ignore'
-    required: false
-
   image_ref:
     description: "The name of the container"
     required: true
@@ -24,7 +20,7 @@ runs:
       uses: actions/checkout@v4
 
     - name: Run Trivy and Report SARIF to GitHub Security tab
-      uses: aquasecurity/trivy-action@0.29.0
+      uses: aquasecurity/trivy-action@0.34.1
       id: scan
       with:
         version: v0.58.0
@@ -33,7 +29,7 @@ runs:
         exit-code: 1
         severity: 'CRITICAL,HIGH'
         format: 'sarif'
-        trivyignores: '.trivyignore'
+        trivy-config: 'trivy.yaml'
         limit-severities-for-sarif: true
         output: 'trivy-results.sarif'
 

.trivyignore.yaml

@@ -0,0 +1,4 @@
+vulnerabilities:
+  - id: CVE-2026-24051
+    statement: Intended to be fixed in `ENG-9057`. The vulnerability happens on macOS/Darwin, as most images are used on Linux machines, we're ok with making this compromise. This was discussed with the team and OK'ed.
+