sec: Suppress GO-2025-3543 for github.com/opencontainers/runc (#25536)

The vulnerability has been withdrawn but it may be a while until
it is removed from the DB used by scanning. Suppressing this
removes the false result in scanning processes. The change should
be reverted once the DB is updated.
This commit is contained in:
James Rasell
2025-03-27 13:58:06 +01:00
committed by GitHub
parent 736103aa54
commit 3ab1673552
2 changed files with 4 additions and 0 deletions

3
.github/scan.hcl vendored
View File

@@ -44,6 +44,9 @@ repository {
# periodically cleaned up to remove items that are no longer found by the scanner.
triage {
suppress {
vulnerabilities = [
"GO-2025-3543", // github.com/opencontainers/runc TODO(jrasell): remove once withdrawn from DBs.
]
paths = [
"ui/tests/*",
"internal/testing/*",

View File

@@ -30,6 +30,7 @@ binary {
suppress {
vulnerabilities = [
"GO-2022-0635", // github.com/aws/aws-sdk-go@v1.55.6 TODO(jrasell): remove when dep updated.
"GO-2025-3543", // github.com/opencontainers/runc TODO(jrasell): remove once withdrawn from DBs.
]
}
}