WIP: Update script to be able to ignore CVEs by file (!3) · Merge requests · GitLab.org / security-products / gitlab-depscan

Dustin Collins requested to merge whitelist-cves into master Sep 10, 2019

Ignore file is a text file passed in as an optional second parameter, with one CVE on each line. Comments are allowed.

Example:

.cveignore

# This is why we whitelisted this
CVE-2019-15548
# This is why we whitelisted that
CVE-2019-10192

Edited Feb 05, 2020 by Dustin Collins

WIP: Update script to be able to ignore CVEs by file