Commit Graph

9 Commits

Author SHA1 Message Date
James Rasell
3ab1673552 sec: Suppress GO-2025-3543 for github.com/opencontainers/runc (#25536)
The vulnerability has been withdrawn but it may be a while until
it is removed from the DB used by scanning. Suppressing this
removes the false result in scanning processes. The change should
be reverted once the DB is updated.
2025-03-27 12:58:06 +00:00
James Rasell
4fbacee328 sec: Remove yamux suppression as vuln has been revoked. (#25044) 2025-02-07 15:15:15 +00:00
James Rasell
e4659970b1 sec: Suppress additional yamux advisory and AWS v1 indirect dep. (#25003) 2025-02-03 14:52:27 +00:00
James Rasell
0d57e91282 sec: Surpress yamux OSV alert in CRT. (#24978)
The change also removes an old surpression which has now been
resolved.
2025-01-30 15:27:19 +00:00
Deniz Onur Duzgun
a4ac2025f4 sec: suppress osv alert in CRT (#24701)
* sec: suppress GO-2022-0635 osv alert in CRT

* hclfmt
2024-12-17 14:56:52 -05:00
Deniz Onur Duzgun
52f0b40f4c security: fine tune security-scanner to reduce false-positives (#20465)
Resolve scan job runner

Resolve linting alerts

adding EOF on files

adding EOF on gitignore too

add hclfmt and bump action versions

update scan.hcl comments

Co-authored-by: Tim Gross <tgross@hashicorp.com>

fix typo

move scan.hcl file and paths-ignore for scans

change action runner

use org secret to checkout

typo

change runner

use hashicorp/setup-golang@v3

Co-authored-by: Tim Gross <tgross@hashicorp.com>

pin the github action sha
2024-09-18 16:55:39 -04:00
hashicorp-copywrite[bot]
f2acbdb49b Update copyright file headers to BUSL-1.1 2023-08-10 17:27:09 -05:00
hashicorp-copywrite[bot]
f005448366 [COMPLIANCE] Add Copyright and License Headers 2023-04-10 15:36:59 +00:00
claire labry
0becc4a9b7 [Main] Onboard to CRT (#12276) 2022-04-06 11:47:02 -04:00