Skip to content

Commit 4bc5121

Browse files
authored
security: update scanner file to modern config (#166)
Signed-off-by: Ryan Cragun <[email protected]>
1 parent 1dbd2a6 commit 4bc5121

File tree

1 file changed

+12
-10
lines changed

1 file changed

+12
-10
lines changed

.release/security-scan.hcl

Lines changed: 12 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,18 @@
11
# Copyright IBM Corp. 2021, 2025
22
# SPDX-License-Identifier: MPL-2.0
33

4-
container {
5-
dependencies = true
6-
alpine_secdb = true
7-
secrets = true
4+
binary {
5+
go_stdlib = true // Scan the Go standard library used to build the binary.
6+
go_modules = true // Scan the Go modules included in the binary.
7+
osv = true // Use the OSV vulnerability database.
8+
oss_index = true // And use OSS Index vulnerability database.
89
}
910

10-
binary {
11-
secrets = true
12-
go_modules = false
13-
osv = true
14-
oss_index = false
15-
nvd = false
11+
container {
12+
dependencies = true // Scan any installed packages for vulnerabilities.
13+
osv = true // Use the OSV vulnerability database.
14+
15+
secrets {
16+
all = true
17+
}
1618
}

0 commit comments

Comments
 (0)