Skip to content

Commit

Permalink
Ignore a particular ansible-core vulnerability
Browse files Browse the repository at this point in the history
This is being done only temporarily, and only because there is no
recent version of ansible-core that does not exhibit the
vulnerability.  Without this change we get a failure from the
pip-audit pre-commit hook that we cannot do anything about.

See #380 for more details.
  • Loading branch information
jsf9k committed Nov 18, 2024
1 parent a00c336 commit b2020a8
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions .pre-commit-config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -161,6 +161,11 @@ repos:
hooks:
- id: pip-audit
args:
# We have to ignore this particular vulnerability in
# ansible-core>=2.11 as there is currently no fix. See
# cisagov/skeleton-packer#380 for more details.
- --ignore-vuln
- GHSA-99w6-3xph-cx78
# Add any pip requirements files to scan
- --requirement
- requirements-dev.txt
Expand Down

0 comments on commit b2020a8

Please sign in to comment.