fix scan

hashicorp · Feb 20, 2025 · 44ce8bb · 44ce8bb
1 parent 12b84d8
commit 44ce8bb
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 24 deletions.
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -2,9 +2,20 @@
 # SPDX-License-Identifier: MPL-2.0
 
 binary {
-	secrets      = true
-	go_modules   = true
-	osv          = true
-	oss_index    = false
-	nvd          = false
+  secrets      = true
+  go_modules   = true
+  osv          = true
+  oss_index    = false
+  nvd          = false
+
+  triage {
+    suppress {
+      vulnerabilites = [
+        "GHSA-f5pg-7wfw-84q9", # AWS S3 Crypto SDK vuln https://osv.dev/vulnerability/GO-2022-0646
+        "GO-2022-0646", # alias
+        "GHSA-7f33-f4f5-xwgw", # AWS S3 Crypto SDK vuln https://osv.dev/vulnerability/GO-2022-0635
+        "GO-2022-0635" #alias
+      ]
+    }
+  }
 }
diff --git a/scan.hcl b/scan.hcl