diff --git a/scan.hcl b/scan.hcl index 6fb499794c..918a450cde 100644 --- a/scan.hcl +++ b/scan.hcl @@ -15,7 +15,13 @@ repository { plugin "semgrep" { use_git_ignore = true exclude = ["vendor"] - config = ["tools/semgrep/ci", "p/r2c-security-audit"] + config = [ + "tools/semgrep/ci", + "p/r2c-security-audit", + "r/trailofbits.go.hanging-goroutine.hanging-goroutine", + "r/trailofbits.go.racy-append-to-slice.racy-append-to-slice", + "r/trailofbits.go.racy-write-to-map.racy-write-to-map", + ] exclude_rule = ["generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var"] }