diff --git a/skaffold.advisories.yaml b/skaffold.advisories.yaml
index 65829cfb4e..b6fd3acb94 100644
--- a/skaffold.advisories.yaml
+++ b/skaffold.advisories.yaml
@@ -170,6 +170,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/bin/skaffold
             scanner: grype
+      - timestamp: 2025-12-12T20:07:45Z
+        type: pending-upstream-fix
+        data:
+          note: timestamp-authority is a transitive dependency and cannot be upgraded until the intermediate packages release versions with a newer timestamp-authority.
 
   - id: CGA-4rrj-jwj8-r753
     aliases: