Configured Grype to automatically ignore CVE-2018-20225 which is disp…

…uted and causes Python flavors to fail (#2864)
oxsecurity · Aug 8, 2023 · 4527131 · 4527131
1 parent 6125847
commit 4527131
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/TEMPLATES/.grype.yaml b/TEMPLATES/.grype.yaml
@@ -142,4 +142,10 @@ fail-on-severity: "high"
   # golang:
   #   using-cpes: true
   # stock:
-  #   using-cpes: true
+  #   using-cpes: true
+
+ignore:
+
+  # Ignored by default; disputed and unwarranted CVE that causes Megalinter to fail
+  # @link https://nvd.nist.gov/vuln/detail/CVE-2018-20225
+  - vulnerability: CVE-2018-20225