mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-05 22:27:03 +02:00
9859b06401
An upstream CVE in busybox is tripping the security scanner: https://github.com/hashicorp/crt-workflows-common/actions/runs/14623987904/job/41031896870#step:9:16 Since this will require a new version of Alpine we can’t do much except suppress it until a new version has been released with Busybox >= 1.38 We’re already rolling on the latest Alpine 3 so we ought to get the fix as soon as it’s released and available, but this will unbreak the pipeline until then. Signed-off-by: Ryan Cragun <me@ryan.ec>
34 lines
726 B
HCL
34 lines
726 B
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
repository {
|
|
go_modules = true
|
|
osv = true
|
|
|
|
dependabot {
|
|
required = true
|
|
check_config = true
|
|
}
|
|
|
|
plugin "codeql" {
|
|
languages = ["go"]
|
|
}
|
|
|
|
plugin "semgrep" {
|
|
use_git_ignore = true
|
|
exclude = ["vendor"]
|
|
config = [
|
|
"tools/semgrep/ci",
|
|
"p/r2c-security-audit",
|
|
"r/trailofbits.go.hanging-goroutine.hanging-goroutine",
|
|
"r/trailofbits.go.racy-append-to-slice.racy-append-to-slice",
|
|
"r/trailofbits.go.racy-write-to-map.racy-write-to-map",
|
|
]
|
|
exclude_rule = ["generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var"]
|
|
}
|
|
|
|
secrets {
|
|
all = true
|
|
}
|
|
}
|