govulncheck: How to disable checks for specific vulnerabilities?

14 views
Skip to first unread message

twp...@gmail.com

unread,
7:04 PM (4 hours ago) 7:04 PM
to golang-nuts
Hello,

I use govulncheck to regularly scan my project for vulnerabilities. Finding a vulnerability currently triggers a build failure.

Unfortunately, someone recently reported GO-2026-4923 which affects my project but isn't a vulnerability at all. However, it's still (for now) in govulncheck's database, so my builds cannot pass until it is removed.

Is there a way to configure govulncheck to ignore specific vulnerabilities? I couldn't find any indication of how to do this in govulncheck's documentation.

My only other alternative is to disable govulncheck completely whenever govulncheck accepts an invalid invulnerability.

Many thanks for any suggestions,
Tom



Reply all
Reply to author
Forward
0 new messages