add changelog, suppress vulnerability that hasn't been fixed yet

hashicorp · Dec 18, 2024 · 9a6f2f9 · 9a6f2f9
1 parent 9c689aa
commit 9a6f2f9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.changelog/22001.txt b/.changelog/22001.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Update `golang.org/x/crypto` to v0.31.0 to address [GO-2024-3321](https://pkg.go.dev/vuln/GO-2024-3321).
+```
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -77,6 +77,7 @@ binary {
 	triage {
 		suppress {
 			vulnerabilities = [
+				"GO-2022-0635", // github.com/aws/[email protected]
 			]
 			paths = [
 				"internal/tools/proto-gen-rpc-glue/e2e/consul/*",