Silverfish/proton-bridge
1
0
Fork 1
mirror of https://github.com/ProtonMail/proton-bridge.git synced 2025-12-10 04:36:43 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

GODT-1645: ignore CVE gobinsec false positive

Browse Source
This commit is contained in:
Romain LE JEUNE
2022-10-25 18:08:05 +02:00
committed by Romain Le Jeune
parent d111a979f7
commit 5a7722fd18
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
utils/gobinsec_conf.yml
View File

@ -8,5 +8,14 @@ file:
expiration: "24h"
ignore:
# golang.org/x/net wrong match, we are using 2871e0cb, fixed by 37e1c6af
# golang.org/x/net wrong match, we are using v0.1.0, fixed by 37e1c6af in v0.0.xxx
- "CVE-2021-33194"
# golang.org/x/crypto wrong match, we are using v0.1.0 all of this have been fixed in vO.O.xx
- "CVE-2019-11840"
- "CVE-2020-29652"
- "CVE-2021-43565"
- "CVE-2022-27191"
- "CVE-2020-9283"
- "CVE-2017-3204"
# golang.org/x/text wrong match, we are using v0.4.0, fixed in a previous version
- "CVE-2020-14040"