diff --git a/ci-scripts/vulnerability-filter.rego b/ci-scripts/vulnerability-filter.rego index 6de740b..bd6c653 100644 --- a/ci-scripts/vulnerability-filter.rego +++ b/ci-scripts/vulnerability-filter.rego @@ -12,45 +12,45 @@ ignore { # KASM-5262 - False positives in libssl1.1 library that is manually installed on some distros ignore { - input.PkgName == "libssl1.1" + input.PkgName == "libssl1.1" input.InstalledVersion == "1.1.1f-1ubuntu2.20" - # Evaluate CWE-ID - deny_vulnerability_ids := { - "CVE-2021-3449", - "CVE-2021-3711", + # Evaluate CWE-ID + deny_vulnerability_ids := { + "CVE-2021-3449", + "CVE-2021-3711", "CVE-2022-0778", "CVE-2022-3602", "CVE-2022-3786", "CVE-2023-0286", - "CVE-2021-3712", - "CVE-2021-4044", - "CVE-2022-1292", - "CVE-2022-1343", - "CVE-2022-2068", - "CVE-2022-2097", - "CVE-2022-4203", - "CVE-2022-4304", - "CVE-2022-4450", - "CVE-2023-0215", - "CVE-2023-0216", - "CVE-2023-0217", - "CVE-2023-0401", - "CVE-2023-2650", - "CVE-2023-5363", - "CVE-2021-23840", - "CVE-2022-1434", - "CVE-2022-1473", - "CVE-2022-3358", - "CVE-2022-3996", - "CVE-2023-0464", - "CVE-2023-0465", - "CVE-2023-0466", - "CVE-2023-1255", - "CVE-2023-2975", - "CVE-2023-3446", - "CVE-2023-3817" - } + "CVE-2021-3712", + "CVE-2021-4044", + "CVE-2022-1292", + "CVE-2022-1343", + "CVE-2022-2068", + "CVE-2022-2097", + "CVE-2022-4203", + "CVE-2022-4304", + "CVE-2022-4450", + "CVE-2023-0215", + "CVE-2023-0216", + "CVE-2023-0217", + "CVE-2023-0401", + "CVE-2023-2650", + "CVE-2023-5363", + "CVE-2021-23840", + "CVE-2022-1434", + "CVE-2022-1473", + "CVE-2022-3358", + "CVE-2022-3996", + "CVE-2023-0464", + "CVE-2023-0465", + "CVE-2023-0466", + "CVE-2023-1255", + "CVE-2023-2975", + "CVE-2023-3446", + "CVE-2023-3817" + } - input.VulnerabilityID == deny_vulnerability_ids[_] + input.VulnerabilityID == deny_vulnerability_ids[_] } \ No newline at end of file