Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add tools/vendor as part of snyk ignore list #4354

Merged
merged 2 commits into from
Sep 26, 2024

Conversation

praveenkumar
Copy link
Member

No description provided.

@praveenkumar
Copy link
Member Author

/hold

Copy link

openshift-ci bot commented Sep 17, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cfergeau

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

```
 ✗ [Low] Path Traversal
   ID: 28235865-e32e-466c-a079-e826f744c2a8
   Path: test/extended/util/prepare.go, line 100
   Info: Unsanitized input from file name flows into os.RemoveAll, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to delete arbitrary files.
```
Copy link

openshift-ci bot commented Sep 25, 2024

New changes are detected. LGTM label has been removed.

@openshift-ci openshift-ci bot removed the lgtm label Sep 25, 2024
Copy link

openshift-ci bot commented Sep 25, 2024

@praveenkumar: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-crc 0959c03 link true /test e2e-crc

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@albfan albfan changed the title Add toos/vendor as part of snyk ignore list Add tools/vendor as part of snyk ignore list Sep 25, 2024
@praveenkumar praveenkumar merged commit 70949d5 into crc-org:main Sep 26, 2024
23 of 32 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants