File tree 2 files changed +9
-3
lines changed
2 files changed +9
-3
lines changed Original file line number Diff line number Diff line change @@ -4,8 +4,16 @@ import data.lib.trivy
4
4
5
5
default ignore = false
6
6
7
+ # Ignore the following Vulnerability IDs
7
8
ignore_vulnerability_ids := {
8
9
# centos 7.6.1810
10
+ # bind-license package version "9.11.4-26.P2.el7_9.14" does not exist
11
+ " CVE-2023-2828"
9
12
# libssh2 package version "1.8.0-4.el7_9.1" does not exist yet
10
13
" CVE-2020-22218"
11
- }
14
+ }
15
+
16
+ # For ignoring vulnID
17
+ ignore {
18
+ input.VulnerabilityID == ignore_vulnerability_ids[_]
19
+ }
Original file line number Diff line number Diff line change @@ -10,7 +10,6 @@ import (
10
10
"strconv"
11
11
"testing"
12
12
13
- "github.com/davecgh/go-spew/spew"
14
13
"github.com/opencontainers/go-digest"
15
14
"github.com/stretchr/testify/assert"
16
15
"github.com/stretchr/testify/require"
@@ -41,7 +40,6 @@ func TestPatch(t *testing.T) {
41
40
tmp := t .TempDir ()
42
41
ignoreFile := filepath .Join (tmp , "ignore.rego" )
43
42
err = os .WriteFile (ignoreFile , trivyIgnore , 0o600 )
44
- spew .Dump (ignoreFile )
45
43
require .NoError (t , err )
46
44
47
45
for _ , img := range images {
You can’t perform that action at this time.
0 commit comments