diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
new file mode 100644
index 0000000..853110d
--- /dev/null
+++ b/.github/containerscan/allowedlist.yaml
@@ -0,0 +1,5 @@
+general:
+  vulnerabilities:
+    - CIS-DI-0005
+    - CIS-DI-0008
+  bestPracticeViolations:
\ No newline at end of file