Add exception for netty vulns

divviup · Mar 7, 2024 · 0c573d7 · 0c573d7
1 parent 13e9304
commit 0c573d7
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.github/dependency-review-config.yml b/.github/dependency-review-config.yml
@@ -0,0 +1,4 @@
+allow-ghsas:
+  # These are server-side vulnerabilities in Netty. We are not affected.
+  - GHSA-xpw8-rcwv-8f8p
+  - GHSA-6mjq-h674-j845
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -53,5 +53,9 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
+    - name: Checkout
+      uses: actions/checkout@v4
     - name: Dependency review
       uses: actions/dependency-review-action@v4
+      with:
+        config-file: './.github/dependency-review-config.yml'