Ignore non-relevant vulnerable dependencies

step-security · Oct 3, 2024 · 8dcd18c · 8dcd18c
1 parent 7253c87
commit 8dcd18c
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/osv-scanner.toml b/osv-scanner.toml
@@ -0,0 +1,15 @@
+[[IgnoredVulns]]
+id = "GHSA-c2qf-rxjj-qqgw"
+reason = "semver vulnerable function `range` not used"
+
+[[IgnoredVulns]]
+id = "GHSA-952p-6rrq-rcjv"
+reason = "It is a test dependency"
+
+[[IgnoredVulns]]
+id = "GHSA-78xj-cgh5-2h22"
+reason = "ip vulnerable function `isPublic()` not used"
+
+[[IgnoredVulns]]
+id = "GHSA-2p57-rm9w-gvfp"
+reason = "ip vulnerable function `isPublic()` not used"