Skip to content

Commit 0258ca5

Browse files
committed
fix: skip govulncheck for now since its not patchable
1 parent 8107550 commit 0258ca5

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

.github/.env.custom

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,3 +30,14 @@ MAGE_X_GO_VERSION=1.25.x
3030
# Secondary Go Version
3131
GO_SECONDARY_VERSION=1.25.x
3232
MAGE_X_GO_SECONDARY_VERSION=1.25.x
33+
34+
# Go vulnerability scanning with Govulncheck (true/false)
35+
ENABLE_SECURITY_SCAN_GOVULNCHECK=false
36+
37+
# This is in regards to:
38+
# Vulnerability #1: GO-2024-3218
39+
# Content Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT
40+
# abuse in github.com/libp2p/go-libp2p-kad-dht
41+
# More info: https://pkg.go.dev/vuln/GO-2024-3218
42+
# Module: github.com/libp2p/go-libp2p-kad-dht
43+
# Found in: github.com/libp2p/go-libp2p-kad-dht@v0.35.1

0 commit comments

Comments
 (0)