diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index dc74c85..b82fe93 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -62,7 +62,7 @@ jobs:
             trivy-ignore: "v8/8.1/.trivyignore"
             extra-tags: |
               8.1
-          - version: "8.0.7"
+          - version: "8.0.8"
             dir: "v8"
             trivy-ignore: "v8/8.0/.trivyignore"
             extra-tags: |
diff --git a/v8/8.0/.trivyignore b/v8/8.0/.trivyignore
index a8a3b91..8ad70d6 100644
--- a/v8/8.0/.trivyignore
+++ b/v8/8.0/.trivyignore
@@ -1,4 +1 @@
 # CVEs baked into the oCIS 8.0 binary (Go dependencies). Unfixable by this repo — requires an upstream owncloud/ocis release. Empty at release time; add entries only when a CVE is later disclosed in this already-released line.
-
-# github.com/go-git/go-git/v5 v5.19.1 (fixed in 5.19.2) — fixed in oCIS 8.2.0
-CVE-2026-71556 exp:2026-10-31