Update linters.yaml (#200)

* Update linters.yaml * Create .trivyignore * Update actions.yml * remove allowedlist --------- Co-authored-by: shaynafinocchiaro <[email protected]>
dell · May 29, 2024 · 3b9b8f6 · 3b9b8f6
1 parent 66535eb
commit 3b9b8f6
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 8 deletions.
diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
diff --git a/.github/workflows/.trivyignore b/.github/workflows/.trivyignore
@@ -0,0 +1,5 @@
+# does not have the fix, https://avd.aquasec.com/nvd/cve-2024-2961 
+CVE-2024-2961
+
+# fix is not yet available, https://nvd.nist.gov/vuln/detail/CVE-2024-33599
+CVE-2024-33599
diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
@@ -105,3 +105,4 @@ jobs:
           severity: 'HIGH,CRITICAL'
           ignore-unfixed: true
           exit-code: '1'
+          trivyignores: '.github/workflows/.trivyignore'
diff --git a/.github/workflows/linters.yaml b/.github/workflows/linters.yaml
@@ -24,7 +24,7 @@ jobs:
         run: |
           go mod vendor
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v4
+        uses: golangci/golangci-lint-action@v5
         with:
           version: latest
           skip-cache: true