Ignore github.com/coredns/coredns vulnerability

Bumping to a fixed version requires bumping Go and K8s versions as well which are problematic in a dot release. Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
submariner-io · Oct 2, 2024 · 0d20231 · 0d20231
1 parent ae44ce9
commit 0d20231
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.grype.yaml b/.grype.yaml
@@ -10,3 +10,8 @@ ignore:
   - vulnerability: CVE-2021-22570
     package:
       name: google.golang.org/protobuf
+  # Bumping to a fixed version requires bumping Go and K8s versions as well which
+  # are problematic in a dot release.
+  - vulnerability: GHSA-hfmw-7g3m-gj6q
+    package:
+      name: github.com/coredns/coredns