mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-04-18 15:25:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

exclude a CVE warning which was already fixed

Browse Source
This commit is contained in:
Ryan Richard
2025-03-06 08:54:14 -08:00
parent c40123e415
commit 840744da70
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pipelines/pull-requests/pipeline.yml
View File

@@ -619,6 +619,10 @@ jobs:
# Removing the "until" date on the next line to ignore this CVE forever.
CVE-2020-8561
# CVE-2025-27144 is in github.com/go-jose/go-jose. We are already using the versions which contain
# the fix v3.0.4 and v4.0.5, but for some reason nancy is complaining about it, so ignore it.
CVE-2025-27144 until=2025-04-01
EOF
nancy sleuth --exclude-vulnerability-file=exclusions.txt < pinniped-modules/modules.json