Ignore guzzlehttp CVE in trivy scan

[arturo-seijas]

Ignore guzzlehttp CVE in trivy scan

[yanksyoon]

LGTM!

[jdkandersson]

What is the reason please?

[arturo-seijas]

What is the reason please?

Trivy is detecting a new vulnerability in one of the wordpress' dependencies. We can't patch it, we'll need to update wordpress

[gregory-schiano]

The build of the image still fails due to the snakeoil key, I think another ignore will have to be added :/

[amandahla]

The config file should be considered now, can you try it, please?
See aquasecurity/trivy-action#238

[arturo-seijas]

The config file should be considered now, can you try it, please? See aquasecurity/trivy-action#238

It hasn't :( I'll pin to the earlier version for now

[github-actions]

Test coverage for ff4f807

Name                Stmts   Miss Branch BrPart  Cover   Missing
---------------------------------------------------------------
src/charm.py          520     39    163     27    90%   203-206, 344-345, 557, 607, 667, 702-703, 753-759, 764, 866, 871-872, 944, 951, 1043, 1052, 1064, 1085, 1094, 1113, 1117, 1146, 1199, 1331, 1353, 1360->1362, 1401->exit, 1413, 1430-1432, 1450, 1459-1460
src/cos.py             15      0      0      0   100%
src/exceptions.py      17      1      2      1    89%   41
src/types_.py          15      0      0      0   100%
---------------------------------------------------------------
TOTAL                 567     40    165     28    90%

Static code analysis report

Run started:2023-06-07 14:54:27.847487

Test results:
  No issues identified.

Code scanned:
  Total lines of code: 4861
  Total lines skipped (#nosec): 4
  Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
  Total issues (by severity):
  	Undefined: 0
  	Low: 0
  	Medium: 0
  	High: 0
  Total issues (by confidence):
  	Undefined: 0
  	Low: 0
  	Medium: 0
  	High: 0
Files skipped (0):

[amandahla]

My mistake, I saw the merge and then thought that it was related to the action :|