From 854b848c7f2c4eb7851989c0bdf27b22d0704162 Mon Sep 17 00:00:00 2001 From: hc-github-team-nomad-core <82989552+hc-github-team-nomad-core@users.noreply.github.com> Date: Mon, 3 Feb 2025 15:12:36 +0000 Subject: [PATCH] sec: Suppress additional yamux advisory and AWS v1 indirect dep (#25005) backport of commit e4659970b1e29e911e3fd4864e8a1bb1e56c9524 Co-authored-by: James Rasell --- .release/security-scan.hcl | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl index 9eacdc096b2..ae120a133ec 100644 --- a/.release/security-scan.hcl +++ b/.release/security-scan.hcl @@ -29,7 +29,9 @@ binary { triage { suppress { vulnerabilities = [ - "GO-2025-3408", // github.com/hashicorp/yamux@v0.1.2 TODO(jrasell): remove when dep updated. + "GO-2025-3408", // github.com/hashicorp/yamux@v0.1.2 TODO(jrasell): remove when dep updated. + "GHSA-29qp-crvh-w22m ", // github.com/hashicorp/yamux@v0.1.2 TODO(jrasell): remove when dep updated. + "GO-2022-0635", // github.com/aws/aws-sdk-go@v1.55.6 TODO(jrasell): remove when dep updated. ] } }