mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
Stephan Renatus
482769dd12
This is a bit of a bag of a few smaller things: * workflows/nightly: skip imported gqlparser package.json It is not used anywhere. * .trivyignore: remove docker CVE This has been bumped away when updating ORAS. * website/livescripts: bump minimatch This also updated the lockfile version... I think that's OK. * workflows/pull-request: don't setup opa for docker image smoke test * address netlify ignore script failure on large output Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>
36 lines
881 B
Plaintext
36 lines
881 B
Plaintext
# We're not directly using nor running these dependencies, and hence they're not applicable
|
|
#
|
|
# * github.com/satori/go.uuid - used by a dependency that imports containerd... the containerd import
|
|
# used here is not vulnerable though.
|
|
CVE-2021-3538
|
|
|
|
# * go.etcd.io/etcd - we don't run etcd as part of the OPA deployment
|
|
CVE-2018-1098
|
|
CVE-2018-1099
|
|
|
|
# * k8s.io/kubernetes - we don't run kubernetes as part of the OPA deployment
|
|
CVE-2019-1002101
|
|
CVE-2019-11250
|
|
CVE-2019-11253
|
|
CVE-2019-11254
|
|
CVE-2020-8552
|
|
CVE-2020-8554
|
|
CVE-2020-8555
|
|
CVE-2020-8557
|
|
CVE-2020-8558
|
|
CVE-2020-8559
|
|
CVE-2020-8561
|
|
CVE-2020-8562
|
|
CVE-2020-8563
|
|
CVE-2020-8564
|
|
CVE-2020-8565
|
|
CVE-2021-25735
|
|
CVE-2021-25740
|
|
CVE-2021-25741
|
|
|
|
# * github.com/emicklei/go-restful - we don't use its code in our handlers
|
|
CVE-2022-1996
|
|
|
|
# github.com/dgrijalva/jwt-go -- vulnerable version used by docker/distribution above
|
|
CVE-2020-26160
|