ci(github): 🔒 ignore vulnerabilities that do not apply

joshuar · Jun 17, 2024 · 6c04716 · 6c04716
1 parent 9bb08f4
commit 6c04716
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -16,6 +16,7 @@
 !/*.yaml
 !/*.yml
 !/*.json
+!/*.toml
 !build/*
 
 !/assets/**/*

diff --git a/osv-scanner.toml b/osv-scanner.toml
@@ -0,0 +1,11 @@
+[[IgnoredVulns]]
+id = "GO-2022-0646"
+reason = "Agent does not use AWS SDK."
+
+[[IgnoredVulns]]
+id = "GO-2024-2698"
+reason = "Agent does not require any archives access."
+
+[[IgnoredVulns]]
+id = "GO-2021-0064"
+reason = "Agent does not use k8s."