Configured Grype to automatically ignore CVE-2018-20225 which is disp…

…uted and causes Python flavors to fail (oxsecurity#2864)
sanmai-NL · Oct 4, 2023 · 33dba2a · 33dba2a
1 parent fdbd51e
commit 33dba2a
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/TEMPLATES/.grype.yaml b/TEMPLATES/.grype.yaml
@@ -142,4 +142,10 @@ fail-on-severity: "high"
   # golang:
   #   using-cpes: true
   # stock:
-  #   using-cpes: true
+  #   using-cpes: true
+
+ignore:
+
+  # Ignored by default; disputed and unwarranted CVE that causes Megalinter to fail
+  # @link https://nvd.nist.gov/vuln/detail/CVE-2018-20225
+  - vulnerability: CVE-2018-20225