Not sure if it's a false detection: Ansible doc has an example of a certificate #7504
Unanswered
synergiator
asked this question in
Q&A
Replies: 2 comments
-
It's a false positive in the sense that the key is only part of the documentation and not used by anything in the Ansible collection. |
Beta Was this translation helpful? Give feedback.
0 replies
-
Hello @synergiator @felixfontein Trivy uses builtinAllowRules to avoid false positives for test, examples, etc. Regards, Dmitriy |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
IDs
HIGH - Asymmetric private Key
Description
Maybe it's a false positive - maybe not?
Maybe related to #6097?
I have posted the issue to the Ansible community.
ansible-collections/community.general#8862
Reproduction Steps
Target
Container Image
Scanner
Secret
Target OS
Alpine
Debug Output
Version
Checklist
-f json
that shows data sources and confirmed that the security advisory in data sources was correctBeta Was this translation helpful? Give feedback.
All reactions