yujunjun/unstructured
1
0
Fork 0
mirror of https://github.com/Unstructured-IO/unstructured.git synced 2025-11-04 12:03:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: add .grype.yaml (#3834)

Browse Source 
**Summary**
CVE-2024-11053 https://curl.se/docs/CVE-2024-11053.html (severity Low)
was published on Dec 11, 2024 and began failing CI builds on open-core
on Dec 13, 2024 when it appeared in `grype` apparently misclassified as
a critical vulnerability.

The severity reported on the CVE is "Low" so it should not fail builds.
Add a `.grype.yaml` file to ignore this CVE until grype is updated.
This commit is contained in:
Steve Canny 2024-12-16 11:39:55 -08:00 committed by GitHub
parent 3b718ec89a
commit b092fb7f47
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.github/workflows/ci.yml vendored
View File

@ -398,3 +398,4 @@ jobs:
image: "unstructured:dev" image: "unstructured:dev"
severity-cutoff: critical severity-cutoff: critical
only-fixed: true only-fixed: true
output-format: table

2
.grype.yaml Normal file
View File

@ -0,0 +1,2 @@
ignore:
- vulnerability: CVE-2024-11053

2
CHANGELOG.md
View File

@ -1,4 +1,4 @@
## 0.16.12-dev0 ## 0.16.12-dev1
### Enhancements ### Enhancements

2
unstructured/__version__.py
View File

@ -1 +1 @@
__version__ = "0.16.12-dev0" # pragma: no cover __version__ = "0.16.12-dev1" # pragma: no cover