From 0d57e91282f45d473cc813323683614b11b0273b Mon Sep 17 00:00:00 2001 From: James Rasell Date: Thu, 30 Jan 2025 16:27:19 +0100 Subject: [PATCH] sec: Surpress yamux OSV alert in CRT. (#24978) The change also removes an old surpression which has now been resolved. --- .release/security-scan.hcl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl index c82d9b69a..9eacdc096 100644 --- a/.release/security-scan.hcl +++ b/.release/security-scan.hcl @@ -29,7 +29,7 @@ binary { triage { suppress { vulnerabilities = [ - "GO-2022-0635", // github.com/aws/aws-sdk-go@v1.55.5 TODO(dduzgun-security): remove when deps is resolved + "GO-2025-3408", // github.com/hashicorp/yamux@v0.1.2 TODO(jrasell): remove when dep updated. ] } }