mirror of
https://github.com/status-im/consul.git
synced 2025-02-16 15:47:21 +00:00
86b0818c1f
security: upgrade vault/api to remove go-jose.v2 This dependency has an open vulnerability (GO-2024-2631), and is no longer needed by the latest `vault/api`. This is a follow-up to the upgrade of `go-jose/v3` in this repository to make all our dependencies consolidate on v3. Also remove the recently added security scan triage block for GO-2024-2631, which was added due to incorrect reports that `go-jose/v3@3.0.3` was impacted; in reality, is was this indirect client dependency (not impacted by CVE) that the scanner was flagging. A bug report has been filed to address the incorrect reporting.
43 lines
1.3 KiB
HCL
43 lines
1.3 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
# Configuration for security scanner.
|
|
# Run on PRs and pushes to `main` and `release/**` branches.
|
|
# See .github/workflows/security-scan.yml for CI config.
|
|
|
|
# To run manually, install scanner and then run `scan repository .`
|
|
|
|
# Scan results are triaged via the GitHub Security tab for this repo.
|
|
# See `security-scanner` docs for more information on how to add `triage` config
|
|
# for specific results or to exclude paths.
|
|
|
|
# .release/security-scan.hcl controls scanner config for release artifacts, which
|
|
# unlike the scans configured here, will block releases in CRT.
|
|
|
|
repository {
|
|
go_modules = true
|
|
npm = true
|
|
osv = true
|
|
|
|
secrets {
|
|
all = true
|
|
}
|
|
|
|
# Triage items that are _safe_ to ignore here. Note that this list should be
|
|
# periodically cleaned up to remove items that are no longer found by the scanner.
|
|
triage {
|
|
suppress {
|
|
# N.b. `vulnerabilites` is the correct spelling for this tool.
|
|
vulnerabilites = [
|
|
]
|
|
paths = [
|
|
"internal/tools/proto-gen-rpc-glue/e2e/consul/*",
|
|
"test/integration/connect/envoy/test-sds-server/*",
|
|
"test/integration/consul-container/*",
|
|
"testing/deployer/*",
|
|
"test-integ/*",
|
|
]
|
|
}
|
|
}
|
|
}
|