diff --git a/oci/traefik/.trivyignore b/oci/traefik/.trivyignore
new file mode 100644
index 00000000..e22a3e66
--- /dev/null
+++ b/oci/traefik/.trivyignore
@@ -0,0 +1,4 @@
+# Upstream CVEs
+
+# github.com/docker/docker - Encrypted overlay network may be unauthenticated
+CVE-2023-28840