sec: Suppress security scanning for yamux-0.1.1

hashicorp · Feb 3, 2025 · d50e507 · d50e507
1 parent a6cb3ac
commit d50e507
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -13,4 +13,15 @@ binary {
   osv        = true
   oss_index  = false
   nvd        = false
+
+  # Triage items that are _safe_ to ignore here. Note that this list should be
+  # periodically cleaned up to remove items that are no longer found by the scanner.
+  triage {
+    suppress {
+      vulnerabilities = [
+        "GHSA-29qp-crvh-w22m", // github.com/hashicorp/yamux@v0.1.1
+        "GO-2025-3408",        // github.com/hashicorp/yamux@v0.1.1
+      ]
+    }
+  }
 }