move suppress to binary block

hashicorp · Jan 29, 2025 · d6a534d · d6a534d
1 parent 2b20031
commit d6a534d
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -12,7 +12,6 @@ container {
 		suppress {
 			vulnerabilities = [
 				"CVE-2024-13176", # [email protected]
-				"GO-2025-3408", # [email protected]
 			]
 		}
 	}
@@ -24,4 +23,14 @@ binary {
 	osv          = true
 	oss_index    = true
 	nvd          = true
+
+	# Triage items that are _safe_ to ignore here. Note that this list should be
+	# periodically cleaned up to remove items that are no longer found by the scanner.
+	triage {
+		suppress {
+			vulnerabilities = [
+				"GO-2025-3408", # [email protected]
+			]
+		}
+	}
 }