github/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-04-15 07:06:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

ignore CVE in dep which has already been upgraded in main to patched dep

Browse Source
This commit is contained in:
Ryan Richard
2025-04-02 13:28:59 -07:00
parent 73c9be5e2a
commit de70584460
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pipelines/pull-requests/pipeline.yml
View File

@@ -621,7 +621,9 @@ jobs:
# CVE-2025-27144 is in github.com/go-jose/go-jose. We are already using the versions which contain
# the fix v3.0.4 and v4.0.5, but for some reason nancy is complaining about it, so ignore it.
CVE-2025-27144 until=2025-04-01
# See https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78 which says that
# 3.0.4 and 4.0.5 contain the fix.
CVE-2025-27144
EOF