Backport of security: triage false positive for go-jose/v3 into relea…

…se/1.15.x (#20902) backport of commit c8d6b25 Co-authored-by: Michael Zalimeni <[email protected]>
hashicorp · Mar 26, 2024 · 4fc9491 · 4fc9491
1 parent 2a8c9d0
commit 4fc9491
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -68,4 +68,15 @@ binary {
 			]
 		}
 	}
+
+	# Triage items that are _safe_ to ignore here. Note that this list should be
+	# periodically cleaned up to remove items that are no longer found by the scanner.
+	triage {
+		suppress {
+			# N.b. `vulnerabilites` is the correct spelling for this tool.
+			vulnerabilites = [
+				"GO-2024-2631", # go-jose/[email protected] (false positive)
+			]
+		}
+	}
 }
diff --git a/scan.hcl b/scan.hcl
@@ -22,4 +22,15 @@ repository {
   secrets {
     all = true
   }
+
+  # Triage items that are _safe_ to ignore here. Note that this list should be
+  # periodically cleaned up to remove items that are no longer found by the scanner.
+  triage {
+    suppress {
+      # N.b. `vulnerabilites` is the correct spelling for this tool.
+      vulnerabilites = [
+        "GO-2024-2631", # go-jose/[email protected] (false positive)
+      ]
+    }
+  }
 }