Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove ignored vulnerability in pip-audit pre-commit hook #210

Open
jsf9k opened this issue Nov 19, 2024 · 0 comments · May be fixed by #213
Open

Remove ignored vulnerability in pip-audit pre-commit hook #210

jsf9k opened this issue Nov 19, 2024 · 0 comments · May be fixed by #213

Comments

@jsf9k
Copy link
Member

jsf9k commented Nov 19, 2024 •
edited
Loading

💡 Summary

In #206 we added commit 94893b7 to ignore a particular ansible-core vulnerability because there is currently no recent version of ansible-core that does not have it. This ignored vulnerability should be removed once that becomes possible.

Motivation and context

Vulnerabilities should not be ignored when they need not be.
jsf9k added a commit that referenced this issue Nov 19, 2024
@jsf9k
Ignore a particular ansible-core vulnerability
94893b7 
This is being done only temporarily, and only because there is no
recent version of ansible-core that does not exhibit the
vulnerability.  Without this change we get a failure from the
pip-audit pre-commit hook that we cannot do anything about.

See #210 for more details.
jsf9k added a commit that referenced this issue Nov 19, 2024
@jsf9k
Ignore a particular ansible-core vulnerability
3bf9ba2 
This is being done only temporarily, and only because there is no
recent version of ansible-core that does not exhibit the
vulnerability.  Without this change we get a failure from the
pip-audit pre-commit hook that we cannot do anything about.

See #210 for more details.
jsf9k added a commit that referenced this issue Nov 19, 2024
@jsf9k
Ignore a particular ansible-core vulnerability
ff01c22 
This is being done only temporarily, and only because there is no
recent version of ansible-core that does not exhibit the
vulnerability.  Without this change we get a failure from the
pip-audit pre-commit hook that we cannot do anything about.

See #210 for more details.
@jsf9k jsf9k linked a pull request Dec 2, 2024 that will close this issue
Draft
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Stop ignoring pip-audit vulnerability cisagov/skeleton-ansible-role
1 participant
@jsf9k