fix: ignore vulnerable dep

mrz1836 · mrz1836 · commit f1a588858bed · 2025-10-16T16:32:02.000-04:00
diff --git a/.github/.env.custom b/.github/.env.custom
@@ -31,3 +31,6 @@ GO_COVERAGE_PROVIDER=codecov
 
 # Codecov Configuration (only used when provider=codecov)
 CODECOV_TOKEN_REQUIRED=true
+
+# Nancy Security Scanner Exclusions (comma-separated CVE IDs)
+NANCY_EXCLUDES=CVE-2024-38513,CVE-2023-45142,CVE-2025-11065
