Hello,
I use
govulncheck to regularly scan my project for vulnerabilities. Finding a vulnerability currently triggers a build failure.
Unfortunately, someone recently reported
GO-2026-4923 which affects my project but
isn't a vulnerability at all. However, it's still (for now) in govulncheck's database, so my builds cannot pass until it is removed.
Is there a way to configure govulncheck to ignore specific vulnerabilities? I couldn't find any indication of how to do this in govulncheck's documentation.
My only other alternative is to disable govulncheck completely whenever govulncheck accepts an invalid invulnerability.
Many thanks for any suggestions,
Tom