Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion .release/security-scan.hcl
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,14 @@ container {
dependencies = true
alpine_secdb = true
secrets = true
triage {
suppress {
vulnerabilites = [
"CVE-2024-58251", # fix unavailable at time of writing
"CVE-2025-46394" # fix unavailable at time of writing
]
}
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove these suppression, we don't need to merge suppression in main branch. only CHANGELOG is needed

}

binary {
Expand All @@ -13,4 +21,4 @@ binary {
osv = true
oss_index = false
nvd = false
}
}
7 changes: 7 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
## envconsul CHANGELOG

## v0.13.4 (Aug 21, 2025)

SECURITY:
* fix: critical Golang vulnerabilities (CVE-2025-22869, CVE-2025-22871) [[GH-380](https://github.com/hashicorp/envconsul/pull/380)]
IMPROVEMENTS:
* Update Golang from 1.22 to 1.25 [[GH-381](https://github.com/hashicorp/envconsul/pull/381)]

## v0.13.3 (Jan 17, 2025)

SECURITY:
Expand Down
Loading