From 76d257af21aff2e4afdd10ddfba27dd2592a85c6 Mon Sep 17 00:00:00 2001 From: Jakub Date: Wed, 17 Jan 2024 14:56:24 +0100 Subject: [PATCH] fix(GODT-3160): ignore non-called vulnerabilities. --- utils/govulncheck.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/utils/govulncheck.sh b/utils/govulncheck.sh index fa465a4e..99bc6238 100755 --- a/utils/govulncheck.sh +++ b/utils/govulncheck.sh @@ -25,7 +25,7 @@ main(){ make gofiles govulncheck -json ./... > vulns.json - jq -r '.osv.id | select( . != null )' < vulns.json > vulns_osv_ids.txt + jq -r '.finding | select( (.osv != null) and (.trace[0].function != null) ) | .osv ' < vulns.json > vulns_osv_ids.txt ignore GO-2023-2102 "GODT-3160 update go to 1.21.4" ignore GO-2023-2043 "GODT-3160 update go to 1.21.4"