Skip to content

Commit

Permalink
[Issue #2261] Update .grype.yml and .trivyignore to clean old vulns (#…
Browse files Browse the repository at this point in the history
…2259)

## Summary
Fixes [2261](#2261)

### Time to review: __5 mins__

## Changes proposed
Remove old vulns that are out of date.
  • Loading branch information
acouch authored Sep 30, 2024
1 parent b1aba81 commit 08ab7cf
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 29 deletions.
19 changes: 0 additions & 19 deletions .grype.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,22 +18,3 @@ ignore:
- fix-state: not-fixed
- fix-state: wont-fix
- fix-state: unknown
# Golang vulnerabilities inside of a python docker image. Both originate from lower level packages within the GitHub CLI:
# https://github.com/cli/cli/blob/trunk/go.mod#L101
# https://github.com/cli/cli/blob/trunk/go.mod#L161
- vulnerability: GHSA-4v7x-pqxf-cx7m
- vulnerability: GHSA-v6v8-xj6m-xwqh
# https://github.com/anchore/grype/issues/1172
- vulnerability: GHSA-xqr8-7jwr-rhp7
- vulnerability: GHSA-7fh5-64p2-3v2j
# pip vulnerability, need to wait for the Python image to update to 23.x
# https://github.com/docker-library/python/blob/402b993af9ca7a5ee22d8ecccaa6197bfb957bc5/3.12/slim-bookworm/Dockerfile#L137
- vulnerability: GHSA-mq26-g339-26xf
# 11/14/2023 - Postgres vulnerabilities in the Debian image
- vulnerability: CVE-2023-39417
- vulnerability: CVE-2023-5869
- vulnerability: CVE-2023-39418
- vulnerability: CVE-2023-5868
- vulnerability: CVE-2023-5870
# Affects SSR in pages router which we don't use https://github.com/advisories/GHSA-gp8f-8m3g-qvj9
- vulnerability: GHSA-gp8f-8m3g-qvj9
10 changes: 0 additions & 10 deletions .trivyignore
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,3 @@
# Issue: Why there is a finding and why this is here or not been removed
# Last checked: Date last checked in scans
#The-CVE-or-vuln-id # Remove comment at start of line
CVE-2023-5363
# 11/14/2023 - Postgres vulnerabilities in the Debian image
CVE-2023-39417
CVE-2023-5869
CVE-2023-39418
CVE-2023-5868
CVE-2023-5870
# 2/12/2024 - libgnutls30 in node:20-bullseye-slim not updated with latest fix. Check again after 2/20/2024 to remove
CVE-2024-0567
CVE-2023-5981

0 comments on commit 08ab7cf

Please sign in to comment.