build: ignore several cves

Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>
ckotzbauer · Mar 5, 2022 · d37c684 · d37c684
1 parent 3e2a655
commit d37c684
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/grype.yaml b/.github/grype.yaml
@@ -0,0 +1,3 @@
+ignore:
+  - vulnerability: CVE-2015-5237
+  - vulnerability: CVE-2021-22570
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -53,3 +53,4 @@ jobs:
         with:
           scan-target: ghcr.io/ckotzbauer/sbom-operator
           fail-on: "medium"
+          config-file: ".github/grype.yaml"