mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 07:26:55 +00:00
Code Activity

Use nancy on actually included dependencies (#9046)

Browse source 
* Use nancy on actually included dependencies

Signed-off-by: Marcel Müller <marcel.mueller1@rwth-aachen.de>

* Update nancy-ignore to only match true dependencies

Signed-off-by: Marcel Müller <marcel.mueller1@rwth-aachen.de>

---------

Signed-off-by: Marcel Müller <marcel.mueller1@rwth-aachen.de>
This commit is contained in:
Marcel 2023-11-29 16:00:20 +01:00 • committed by GitHub
parent 265470f85e
commit 9d3400406d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 28 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/nancy.yaml vendored
View file

@ -30,6 +30,6 @@ jobs:
uses: ./.github/actions/setup-build-env
timeout-minutes: 10
- name: WriteGoList
run: go list -json -m all > go.list
run: go list -json -deps ./... > go.list
- name: Nancy SAST Scan
uses: sonatype-nexus-community/nancy-github-action@726e338312e68ecdd4b4195765f174d3b3ce1533 # v1.0.3

28
.nancy-ignore
View file

@ -1,28 +1,2 @@
# golang/github.com/hashicorp/consul/api@v1.20.0
# golang/github.com/hashicorp/consul/sdk@v0.3.0
CVE-2022-29153 until=2023-11-30
# golang/github.com/nats-io/jwt@v0.3.2
# golang/github.com/nats-io/nats-server/v2@v2.1.2
# golang/github.com/nats-io/nkeys@v0.4.5
CVE-2020-26892 until=2023-11-30
CVE-2021-3127 until=2023-11-30
CVE-2022-24450 until=2023-11-30
CVE-2020-26521 until=2023-11-30
CVE-2020-28466 until=2023-11-30
CVE-2022-29946 until=2023-11-30
CVE-2022-42709 until=2023-11-30
CVE-2022-42708 until=2023-11-30
CVE-2021-32026 until=2023-11-30
CVE-2023-46129 until=2023-11-30
# golang/github.com/tektoncd/pipeline@v0.49.0
CVE-2023-37264 until=2023-11-30
# golang/k8s.io/apiserver@v0.28.1
CVE-2020-8561 until=2023-11-30
# golang/go.etcd.io/etcd/v3@v3.5.8
CVE-2023-0296 until=2023-11-30
CVE-2023-32082 until=2023-11-30
CVE-2022-34038 until=2023-11-30
# golang/github.com/jinzhu/gorm@v1.9.1
CVE-2019-15562 until=2023-11-30
# golang/github.com/gofiber/fiber/v2@v2.43.0
CVE-2023-41338 until=2023-11-30
CVE-2020-8561 until=2023-11-30