Skip to content

Commit a3ac668

Browse files
ignore cf binaries
1 parent 744d314 commit a3ac668

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

ci/tasks/scan-image

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,4 +21,7 @@ trivy \
2121
--ignore-unfixed \
2222
--exit-code 1 \
2323
--input image/image.tar \
24+
--skip-files /opt/cf-cli-6.*/cf \
25+
--skip-files /opt/cf-cli-7.*/cf7 \
26+
--skip-files /opt/cf-cli-8.*/cf8 \
2427
$ignore_policy

ci/trivy-ignore.rego

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,6 @@ package trivy
33
default ignore = false
44

55
ignore_cve_ids := {
6-
# opt/cf-cli-7.5.0/cf7 (gobinary)
7-
# opt/cf-cli-8.4.0/cf8 (gobinary)
8-
"CVE-2022-41723"
96
}
107

118
ignore {

0 commit comments

Comments
 (0)