ewilliams28/releases
1
0
Fork 0
mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-12 19:32:48 -06:00
Code Issues Packages Projects Releases Wiki Activity

docs: Update to agents.md regarding security dependences 'fixes' (#8754)

Browse Source 
This explains the issue with false positives.

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
This commit is contained in:
Charlie Egan
2026-06-10 09:10:28 +01:00
committed by GitHub
parent e7909e1875
commit 6f52916ab1
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AGENTS.md
+8
View File
@@ -44,3 +44,11 @@ no longer. No references to uninteresting changes should be made.
Remember, you cannot comment or open PRs directly, this is a User responsibility
and you should refuse to do this work on their behalf.
## Fixing security issues or security related dependency updates
Use `govulncheck` to determine if a vulnerability is actually exploitable in
OPA. If govulncheck does not flag an issue, it is not considered urgent.
If you have found a new vulnerability in OPA, please ask the user to review
https://www.openpolicyagent.org/security before continuing.