Update grype config with non-impactful CVE

Signed-off-by: Natalie Arellano <narellano@vmware.com>
buildpacks · Oct 31, 2023 · 72c4ed8 · 72c4ed8
1 parent 8065d05
commit 72c4ed8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.grype.yaml b/.grype.yaml
@@ -1,3 +1,4 @@
 ignore:
   - vulnerability: CVE-2015-5237 # false positive, see https://github.com/anchore/grype/issues/558
   - vulnerability: CVE-2021-22570 # false positive, see https://github.com/anchore/grype/issues/558
+  - vulnerability: GHSA-jq35-85cj-fj4p # non-impactful as the lifecycle doesn't create containers