From 8b49d00cbe9dbf421f7c55d28249b1b6512f6b50 Mon Sep 17 00:00:00 2001 From: tommystendahl Date: Wed, 22 Nov 2023 11:51:07 +0100 Subject: [PATCH] Ignore GHSA-mjmj-j48q-9wg2 (#257) Since we use SnakeYaml's SafeConsturctor we are not affected. --- osv-scanner.toml | 3 +++ pom.xml | 1 + 2 files changed, 4 insertions(+) create mode 100644 osv-scanner.toml diff --git a/osv-scanner.toml b/osv-scanner.toml new file mode 100644 index 00000000..5614973b --- /dev/null +++ b/osv-scanner.toml @@ -0,0 +1,3 @@ +[[IgnoredVulns]] +id = "GHSA-mjmj-j48q-9wg2" +reason = "Using SafeConsturctor" diff --git a/pom.xml b/pom.xml index 50ace10f..8b4c8909 100644 --- a/pom.xml +++ b/pom.xml @@ -273,6 +273,7 @@ limitations under the License. true true + osv-scanner.toml CODEOWNERS LICENSE NOTICE