chore: fix osv scanner (#4414)

* chore: fix osv scanner Signed-off-by: zirain <[email protected]> * remove comment Signed-off-by: zirain <[email protected]> * nit Signed-off-by: zirain <[email protected]> --------- Signed-off-by: zirain <[email protected]>
envoyproxy · Oct 9, 2024 · 87b8418 · 87b8418
1 parent 93a0561
commit 87b8418
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 2 deletions.
diff --git a/.github/workflows/license-scan.yml b/.github/workflows/license-scan.yml
@@ -20,7 +20,6 @@ jobs:
     - name: Run scanner
       uses: google/osv-scanner-action/osv-scanner-action@19ec1116569a47416e11a45848722b1af31a857b  # v1.9.0
       with:
-        # TODO enable call analysis once https://github.com/google/osv-scanner/issues/1220 is resolved
         scan-args: |-
           --skip-git
           --experimental-licenses=Apache-2.0,BSD-2-Clause,BSD-2-Clause-FreeBSD,BSD-3-Clause,MIT,ISC,Python-2.0,PostgreSQL,X11,Zlib

diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
@@ -39,7 +39,6 @@ jobs:
       contents: read
       security-events: write
     with:
-      # TODO enable call analysis once https://github.com/google/osv-scanner/issues/1220 is resolved
       scan-args: |-
         --skip-git
         --recursive

diff --git a/osv-scanner.toml b/osv-scanner.toml
@@ -96,3 +96,10 @@ version = "1.2.0-rc2"
 ecosystem = "Go"
 license.override = ["Apache-2.0"]
 reason = "https://github.com/envoyproxy/gateway/actions/runs/11065210699/job/30744231458?pr=4270"
+
+[[PackageOverrides]]
+name = "sigs.k8s.io/json"
+version = "0.0.0-20221116044647-bc3834ca7abd"
+ecosystem = "Go"
+license.override = ["Apache-2.0"]
+reason = "https://github.com/kubernetes-sigs/json/blob/main/LICENSE"