chore: OSV Scanner settings configured (#1738)

dadrus · Aug 25, 2024 · f4c74ae · f4c74ae
1 parent 14fc2de
commit f4c74ae
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/docs/osv-scanner.toml b/docs/osv-scanner.toml
@@ -0,0 +1,5 @@
+[[PackageOverrides]]
+name = "ws"
+ecosystem = "npm"
+ignore = true
+reason = "The entire docs directory is there to generat static html content. Although some of the dependencies may have vulnerabilities, like the ws package, they have no effect as neither inbound nor outbound connections are made during the generation of the content, respectively there is no server, which would use that functionalit, when the generated html documentation is hosted somewhere"
diff --git a/osv-scanner.toml b/osv-scanner.toml
@@ -1,4 +1,3 @@
-[[PackageOverrides]]
-name = "docs"
-ignore = true
-reason = "The results of this directory is generated static html content. Even some of the dependencies may have vulnerabilities they have no effect as neither inbound nor outbound connections are made during the generation of the content."
+[[IgnoredVulns]]
+id = "GO-2022-0646"
+reason = "The access to the S3 bucket happens in read-only mode without making use of the EncryptionClient."