Merge branch 'trunk' into dependabot/pip/cryptography-41.0.6

apache · Dec 3, 2023 · 6e39117 · 6e39117
2 parents 3eceffd + c3c666e
commit 6e39117
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -273,9 +273,11 @@ jobs:
         with:
           virtual-environment: venv/
           # setuptools which we don't install or depend on directly
+          # PYSEC-2023-228 - pip vulnerability and we don't install pip directly
           ignore-vulns: |
             GHSA-r9hx-vwmv-q579
             PYSEC-2022-43012
+            PYSEC-2023-228
 
       - name: Cleanup
         run: |