Add .grype.yaml file to ignore known false positives

Signed-off-by: Natalie Arellano <narellano@vmware.com>
buildpacks · Aug 13, 2024 · 1eccbe9 · 1eccbe9
1 parent 3a22a7f
commit 1eccbe9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.grype.yaml b/.grype.yaml
@@ -0,0 +1,3 @@
+ignore:
+  - vulnerability: CVE-2015-5237 # false positive, see https://github.com/anchore/grype/issues/558
+  - vulnerability: CVE-2021-22570 # false positive, see https://github.com/anchore/grype/issues/558