feat(sca): allow ignoring vulnerabilities by CVE id - Githubissues

GitGuardian / ggshield

Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

https://gitguardian.com

MIT License

1.57k stars 138 forks source link

feat(sca): allow ignoring vulnerabilities by CVE id #884

Closed gg-jonathangriffe closed 2 months ago

gg-jonathangriffe commented 2 months ago

Context

We want to allow ignoring vulnerabilities by CVE id in the config.

What has been done

Ignore vulnerabilities identifier validation now additionally allows identifiers following the CVE id pattern.

Validation

PR check list

[ ] As much as possible, the changes include tests (unit and/or functional)
[ ] If the changes affect the end user (new feature, behavior change, bug fix) then the PR has a changelog entry (see doc/dev/getting-started.md). If the changes do not affect the end user, then the skip-changelog label has been added to the PR.