github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Backport of security: triage false positive for go-jose/v3 into release/1.17.x (#20904) 

backport of commit c8d6b2528c

Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
pull/20922/head ent-changelog-1.17.4
hc-github-team-consul-core 2024-03-26 17:45:36 -04:00 committed by GitHub
parent f9f04163b7
commit 3e2302b191
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.release/security-scan.hcl
View File

@ -67,4 +67,15 @@ binary {
]
}
}
# Triage items that are _safe_ to ignore here. Note that this list should be
# periodically cleaned up to remove items that are no longer found by the scanner.
triage {
suppress {
# N.b. `vulnerabilites` is the correct spelling for this tool.
vulnerabilites = [
"GO-2024-2631", # go-jose/v3@v3.0.3 (false positive)
]
}
}
}

11
scan.hcl
View File

@ -22,4 +22,15 @@ repository {
secrets {
all = true
}
# Triage items that are _safe_ to ignore here. Note that this list should be
# periodically cleaned up to remove items that are no longer found by the scanner.
triage {
suppress {
# N.b. `vulnerabilites` is the correct spelling for this tool.
vulnerabilites = [
"GO-2024-2631", # go-jose/v3@v3.0.3 (false positive)
]
}
}
}