Browse Source

ci(security-scanner): add support for Red Hat UBI images and fix typo (#21912)

* ci(security-scanner): add support for Red Hat UBI images and fix typo

* hclfmt

* clean-up comments

Co-authored-by: Kent Gruber <kent@hashicorp.com>

---------

Co-authored-by: Kent Gruber <kent@hashicorp.com>
pull/21915/head
Deniz Onur Duzgun 2 weeks ago committed by GitHub
parent
commit
1dfc265abe
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 8
      .release/security-scan.hcl
  2. 3
      scan.hcl

8
.release/security-scan.hcl

@ -14,7 +14,7 @@
container { container {
dependencies = true dependencies = true
alpine_secdb = true osv = true
secrets { secrets {
matchers { matchers {
@ -36,8 +36,7 @@ container {
# periodically cleaned up to remove items that are no longer found by the scanner. # periodically cleaned up to remove items that are no longer found by the scanner.
triage { triage {
suppress { suppress {
# N.b. `vulnerabilites` is the correct spelling for this tool. vulnerabilities = [
vulnerabilites = [
"CVE-2024-8096", # curl@8.9.1-r2, "CVE-2024-8096", # curl@8.9.1-r2,
"CVE-2024-9143", # openssl@3.3.2-r0, "CVE-2024-9143", # openssl@3.3.2-r0,
] ]
@ -79,8 +78,7 @@ binary {
# periodically cleaned up to remove items that are no longer found by the scanner. # periodically cleaned up to remove items that are no longer found by the scanner.
triage { triage {
suppress { suppress {
# N.b. `vulnerabilites` is the correct spelling for this tool. vulnerabilities = [
vulnerabilites = [
] ]
paths = [ paths = [
"internal/tools/proto-gen-rpc-glue/e2e/consul/*", "internal/tools/proto-gen-rpc-glue/e2e/consul/*",

3
scan.hcl

@ -28,8 +28,7 @@ repository {
# periodically cleaned up to remove items that are no longer found by the scanner. # periodically cleaned up to remove items that are no longer found by the scanner.
triage { triage {
suppress { suppress {
# N.b. `vulnerabilites` is the correct spelling for this tool. vulnerabilities = [
vulnerabilites = [
] ]
paths = [ paths = [
"internal/tools/proto-gen-rpc-glue/e2e/consul/*", "internal/tools/proto-gen-rpc-glue/e2e/consul/*",

Loading…
Cancel
Save