christoph/wamr
1
Fork 0
Code Releases Activity

Exclude fuzz test python and npm packages in scoreboard scan (#3871)

Browse Source 
* exclude fuzz test for scoreboard scan

* ci ignore osv-scanner.toml file name inconsistency
This commit is contained in:
TianlongLiang
2024-10-23 14:48:15 +08:00
committed by GitHub
parent 217ba3b10c
commit 7d56289fab
3 changed files with 85 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
tests/fuzz/wasm-mutator-fuzz/server/osv-scanner.toml Normal file
View File

@ -0,0 +1,32 @@
# GHSA-m2qf-hxjv-5gpq / PYSEC-2023-62
[[PackageOverrides]]
name = "Flask"
ecosystem = "PyPI"
ignore = true
reason = "Accepted known vulnerabilities for testing purposes"
# GHSA-m2qf-hxjv-5gpq / PYSEC-2023-62
[[PackageOverrides]]
name = "flask"
ecosystem = "PyPI"
ignore = true
reason = "Accepted known vulnerabilities for testing purposes"
# GHSA-84pr-m4jr-85g5
# GHSA-hxwh-jpp2-84pm / PYSEC-2024-71
[[PackageOverrides]]
name = "flask-cors"
ecosystem = "PyPI"
ignore = true
reason = "Accepted known vulnerabilities for testing purposes"
# GHSA-2g68-c3qc-8985
# GHSA-hrfv-mqp8-q5rw / PYSEC-2023-221
# GHSA-px8h-6qxv-m22q / PYSEC-2023-57
# GHSA-xg9f-g7g7-2323 / PYSEC-2023-58
# PYSEC-2022-203
[[PackageOverrides]]
name = "werkzeug"
ecosystem = "PyPI"
ignore = true
reason = "Accepted known vulnerabilities for testing purposes"