search

ComplianceAsCode / compliance-operator

Operator providing Kubernetes cluster compliance checks
Apache License 2.0
38 stars 23 forks source link

Fix false positive trivy filesystem scan result #548

Closed rhmdnd closed 3 months ago

rhmdnd commented 3 months ago

Trivy is warning us about an issue in gosec where it thinks a secret is being exposed, but it's actually just a regular expression. Let's exclude it by the specific file that contains the violation so it stops failing.

github-actions[bot] commented 3 months ago

:robot: To deploy this PR, run the following command:

make catalog-deploy CATALOG_IMG=ghcr.io/complianceascode/compliance-operator-catalog:548
rhmdnd commented 3 months ago

/retest-required

openshift-ci[bot] commented 3 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rhmdnd, yuumasato

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/ComplianceAsCode/compliance-operator/blob/master/OWNERS)~~ [rhmdnd] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment