Files
nomad/.release/security-scan.hcl
James Rasell 3ab1673552 sec: Suppress GO-2025-3543 for github.com/opencontainers/runc (#25536)
The vulnerability has been withdrawn but it may be a while until
it is removed from the DB used by scanning. Suppressing this
removes the false result in scanning processes. The change should
be reverted once the DB is updated.
2025-03-27 12:58:06 +00:00

38 lines
877 B
HCL

# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1
container {
local_daemon = true
secrets {
all = true
skip_path_strings = ["/website/content/"]
}
dependencies = true
alpine_security = true
}
binary {
go_modules = true
osv = true
go_stdlib = true
nvd = false
secrets {
all = true
skip_path_strings = ["/website/content/"]
}
# Triage items that are _safe_ to ignore here. Note that this list should be
# periodically cleaned up to remove items that are no longer found by the scanner.
triage {
suppress {
vulnerabilities = [
"GO-2022-0635", // github.com/aws/aws-sdk-go@v1.55.6 TODO(jrasell): remove when dep updated.
"GO-2025-3543", // github.com/opencontainers/runc TODO(jrasell): remove once withdrawn from DBs.
]
}
}
}