mirror of https://github.com/status-im/consul.git
security: enable go stdlib scans (#20905)
* security: enable go stdlib scans * security: enable go stdlib binary scan * Fix formating
This commit is contained in:
parent
6f02144a14
commit
574f53d176
|
@ -56,6 +56,7 @@ container {
|
||||||
binary {
|
binary {
|
||||||
go_modules = true
|
go_modules = true
|
||||||
osv = true
|
osv = true
|
||||||
|
go_stdlib = true
|
||||||
# We can't enable npm for binary targets today because we don't yet embed the relevant file
|
# We can't enable npm for binary targets today because we don't yet embed the relevant file
|
||||||
# (yarn.lock) in the Consul binary. This is something we may investigate in the future.
|
# (yarn.lock) in the Consul binary. This is something we may investigate in the future.
|
||||||
|
|
||||||
|
|
7
scan.hcl
7
scan.hcl
|
@ -15,9 +15,10 @@
|
||||||
# unlike the scans configured here, will block releases in CRT.
|
# unlike the scans configured here, will block releases in CRT.
|
||||||
|
|
||||||
repository {
|
repository {
|
||||||
go_modules = true
|
go_modules = true
|
||||||
npm = true
|
npm = true
|
||||||
osv = true
|
osv = true
|
||||||
|
go_stdlib_version_file = ".go-version"
|
||||||
|
|
||||||
secrets {
|
secrets {
|
||||||
all = true
|
all = true
|
||||||
|
|
Loading…
Reference in New Issue