diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
new file mode 100644
index 0000000..d11a127
--- /dev/null
+++ b/.github/containerscan/allowedlist.yaml
@@ -0,0 +1,4 @@
+general:
+  vulnerabilities:
+  bestPracticeViolations:
+    - DKL-DI-0001 # * FATAL:Avoid sudo command