Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore many CVEs #2523

Merged
merged 11 commits into from
Oct 12, 2023
Merged

Ignore many CVEs #2523

Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
cab46a8
Ignore CVE-2023-29007
ellsclytn Oct 11, 2023
2e1ae9a
Ignore CVE-2023-25652
ellsclytn Oct 11, 2023
708fa17
Ignore CVE-2021-3864
ellsclytn Oct 11, 2023
d34ce72
Ignore CVE-2013-7445
ellsclytn Oct 11, 2023
82a6a30
Ignore CVE-2019-19814 and CVE-2019-19449
ellsclytn Oct 11, 2023
f3c0efb
Ignore CVE-2021-3847
ellsclytn Oct 11, 2023
67d8ce0
Ignore CVE-2023-35827
ellsclytn Oct 11, 2023
fc22a52
Ignore CVE-2023-2953
ellsclytn Oct 11, 2023
01e86a9
Ignore CVE-2023-31484
ellsclytn Oct 11, 2023
1f20381
Ignore CVE-2023-24329
ellsclytn Oct 11, 2023
caeab8f
Ignore CVE-2023-3640
ellsclytn Oct 12, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions .buildkite/pipeline.deploy.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,19 @@ steps:
plugins:
- buildkite/ecr-scan-results#v1.2.0:
image-name: "${ECR_REPO}:${BUILDKITE_BUILD_NUMBER}"
ignore:
- CVE-2023-29007 # git 1:2.39.2-1.1
- CVE-2023-25652 # git 1:2.39.2-1.1
- CVE-2021-3864 # linux 6.1.55-1
- CVE-2013-7445 # linux 6.1.55-1
- CVE-2019-19814 # linux 6.1.55-1
- CVE-2019-19449 # linux 6.1.55-1
- CVE-2021-3847 # linux 6.1.55-1
- CVE-2023-35827 # linux 6.1.55-1
- CVE-2023-2953 # openldap 2.5.13+dfsg-5
- CVE-2023-31484 # perl 5.36.0-7
- CVE-2023-24329 # python3.11 3.11.2-6
- CVE-2023-3640 # linux 6.1.55-1

# If the current user is part of the deploy team, then wait for everything to
# finish before deploying
Expand Down