Silverfish/proton-bridge
1
0
Fork 1
mirror of https://github.com/ProtonMail/proton-bridge.git synced 2025-12-10 12:46:46 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

GODT-1853: ignore for CVE-2021-33194 false positive + add several try to gobinsec

Browse Source
This commit is contained in:
Romain LE JEUNE
2022-09-22 17:08:07 +02:00
parent 1cc7ea5ca7
commit a635b023f6
3 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitlab-ci.yml
View File

@ -270,7 +270,7 @@ check-gobinsec:
- cp ./gobinsec-cache-valid.yml ./gobinsec-cache.yml - cp ./gobinsec-cache-valid.yml ./gobinsec-cache.yml
script: script:
- cat ./gobinsec-cache.yml - cat ./gobinsec-cache.yml
- gobinsec -wait -cache -config utils/gobinsec_conf.yml build/bridge - ./utils/run_gobinsec.sh
- cp ./gobinsec-cache.yml ./gobinsec-cache-valid.yml # Only update cache file if gobinsec succeeds - cp ./gobinsec-cache.yml ./gobinsec-cache-valid.yml # Only update cache file if gobinsec succeeds

4
utils/gobinsec_conf.yml
View File

@ -5,3 +5,7 @@ wait: true
file: file:
name: "./gobinsec-cache.yml" name: "./gobinsec-cache.yml"
expiration: 24h expiration: 24h
ignore:
# golang.org/x/net wrong match, we are using 2871e0cb, fixed by 37e1c6af
- "CVE-2021-33194"

5
utils/run_gobinsec.sh Executable file
View File

@ -0,0 +1,5 @@
#!/bin/bash
gobinsec -wait -cache -config utils/gobinsec_conf.yml build/bridge || FAILED=true
if [ $FAILED ]; then
gobinsec -wait -cache -config utils/gobinsec_conf.yml build/bridge
fi