diff --git a/.trivyignore b/.trivyignore
index f68839a..eff8e1d 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -6,3 +6,10 @@
 # open on purpose (standard outbound for the managed instance). Consumers can
 # tighten egress when required — kept flexible by design.
 AVD-AWS-0104
+
+# AVD-DS-0002 — the worker images build on the shared worker-bridge base, which
+# runs as root by design today (same as scopes-lambda and
+# services-postgresql-rds): the runtime user is governed by the agent's worker
+# pod securityContext/patches, not by a USER directive here. Revisit when the
+# bridge ships a non-root variant.
+AVD-DS-0002