Explorar o código

chore: Temporary exclude GHSA-gcjh-h69q-9w9g (#6795)

Without this, a few other changes will be blocked, while we
wait for upstream dependencies to bump their code.

This is a problem, as it prevents us to bump/modify our code.

This is only a temporary measure until kubernetes/controller-runtime
and gitLab/protovalidate are bumped to use cel-go > 0.29.0.

Signed-off-by: Jean-Philippe Evrard <jean-philippe.evrard+rochepub@external.roche.com>
Jean-Philippe Evrard hai 1 semana
pai
achega
bf4736a0d7
Modificáronse 1 ficheiros con 2 adicións e 0 borrados
  1. 2 0
      .github/workflows/dependency-review.yml

+ 2 - 0
.github/workflows/dependency-review.yml

@@ -27,3 +27,5 @@ jobs:
           persist-credentials: false
           persist-credentials: false
       - name: 'Dependency Review'
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
         uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
+        with:
+          allow-ghsas: GHSA-gcjh-h69q-9w9g