Skip to content
This repository was archived by the owner on Jun 27, 2025. It is now read-only.

ci: security scanner update #560

Merged
tgross merged 1 commit into from
Jun 26, 2025
Merged

ci: security scanner update #560

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 21 additions & 4 deletions .release/security-scan.hcl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,32 @@
# SPDX-License-Identifier: MPL-2.0

container {
dependencies = true
alpine_secdb = true
secrets = true
dependencies = true
alpine_security = true

secrets {
all = true
}
}

binary {
secrets = true
go_modules = true
osv = true
go_stdlib = true
oss_index = false
nvd = false

secrets {
all = true
}

# Triage items that are _safe_ to ignore here. Note that this list should be
# periodically cleaned up to remove items that are no longer found by the scanner.
triage {
suppress {
vulnerabilities = [
"GHSA-rx97-6c62-55mf", // https://github.com/github/advisory-database/pull/5759 TODO(dduzgun): remove when dep updated.
]
}
}
}