Skip to content

Commit 0210417

Browse files
committed
NO-ISSUE: Fix false positive vulnerability flags in OpenShift Installer by Snyk
1 parent dd0af19 commit 0210417

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.snyk

+3
Original file line numberDiff line numberDiff line change
@@ -13,3 +13,6 @@ ignore:
1313
'SNYK-GOLANG-K8SIOCLIENTGOTRANSPORT-7538822':
1414
- '* > k8s.io/client-go/transport':
1515
reason: 'Snyk mistakenly identifies v1.17.0-alpha.1 as newer than v0.29.7. client-go has a complicated history of versioning. Presumably, v1.20.0-alpha.1 referred to kubernetes-v1.20. kubernetes tags have since been prefaced by "kubernetes", whereas actual client-go versions resumed numbering from 0.x'
16+
'SNYK-GOLANG-GITHUBCOMOPENSHIFTINSTALLERDATA-1070553':
17+
- '* > github.com/openshift/installer/data':
18+
reason: 'Snyk incorrectly flags this exposure because the semver of the tag we are referencing in go.mod sorts lower than the semver of the release branch in which the fix appeared several years ago.'

0 commit comments

Comments
 (0)