mirrors/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2025-12-24 19:01:51 +01:00
Code Issues Projects Releases Wiki Activity

Merge remote-tracking branch 'remotes/from/ce/release/1.21.x' into release/1.21.x

Browse Source
This commit is contained in:
hc-github-team-secure-vault-core 2025-12-17 21:02:46 +00:00
commit 9729c55df2
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.release/security-scan.hcl
View File

@ -32,6 +32,17 @@ container {
"CVE-2024-58251",
"GO-2022-0635", // github.com/aws/aws-sdk-go@v1.x
]
// The OSV scanner will trip on several packages that are included in the
// the UBI images. This is due to RHEL using the same base version in the
// package name for the life of the distro regardless of whether or not
// that version has been patched for security. Rather than enumate ever
// single CVE that the OSV scanner will find (several tens) we'll ignore
// the base UBI packages.
paths = [
"usr/lib/sysimage/rpm/*",
"var/lib/rpm/*",
]
}
}
}