Skip to content

Commit 2e0f3ec

Browse files
committed
Ignore requests security vulnerability
1 parent 57a71e0 commit 2e0f3ec

File tree

2 files changed

+8
-2
lines changed

2 files changed

+8
-2
lines changed

images/ansible-operator/Dockerfile

+4-1
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,10 @@ RUN set -e && yum clean all && rm -rf /var/cache/yum/* \
3030
# - https://github.com/advisories/GHSA-f6pv-j8mr-w6rr \
3131
# - https://github.com/dbt-labs/dbt-core/issues/10250 \
3232
# - https://data.safetycli.com/v/70612/97c/ \
33-
&& pipenv check --ignore 70612 \
33+
# NOTE: This ignored vulnerability (71064) was detected in requests, \
34+
# but the upgraded version doesn't support the use case (protocol we are using).\
35+
# Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688
36+
&& pipenv check --ignore 70612 --ignore 71064 \
3437
&& yum remove -y gcc libffi-devel openssl-devel python39-devel \
3538
&& yum clean all \
3639
&& rm -rf /var/cache/yum

images/ansible-operator/pipfile.Dockerfile

+4-1
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,10 @@ RUN set -e && yum clean all && rm -rf /var/cache/yum/* \
2626
# - https://github.com/advisories/GHSA-f6pv-j8mr-w6rr \
2727
# - https://github.com/dbt-labs/dbt-core/issues/10250 \
2828
# - https://data.safetycli.com/v/70612/97c/ \
29-
&& pipenv check --ignore 70612 \
29+
# NOTE: This ignored vulnerability (71064) was detected in requests, \
30+
# but the upgraded version doesn't support the use case (protocol we are using).\
31+
# Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688
32+
&& pipenv check --ignore 70612 --ignore 71064 \
3033
&& yum remove -y gcc libffi-devel openssl-devel python39-devel \
3134
&& yum clean all \
3235
&& rm -rf /var/cache/yum

0 commit comments

Comments
 (0)