Skip to content

Commit 98f6948

Browse files
Chore: [AEA-0000] - trivy ignore fasterxml-core (#459)
## Summary - 🤖 Operational or Infrastructure Change ### Details Add GHSA-72hv-8253-57qq to the Trivy ignore list Note that there are 2 dependabots seeking to upgrade this fasterxml, but the patched version of fasterxml-core (2.21.1) does not have a matching fasterxml-annotations. Retaining fasterxml-annotations at the existing version gives unit test failures. Co-authored-by: Connor Avery <connor.avery2@nhs.net>
1 parent 08604ba commit 98f6948

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.trivyignore

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,3 +18,6 @@ CVE-2021-35515
1818
CVE-2021-35516
1919
CVE-2021-35517
2020
CVE-2021-36090
21+
# upgrading fasterxml-core to fixed version 2.21.1 appears to not
22+
# be compatible with 2.19.2 of fasterxml-annotations
23+
GHSA-72hv-8253-57qq

0 commit comments

Comments
 (0)