ayo/kitty
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Filter out another form of the same CVE

Browse source
This commit is contained in:
Kovid Goyal 2025-09-17 23:14:40 +05:30
parent 87856efa49
commit c4cb9cdbb7
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
.github/workflows/ci.py vendored
View file

@ -205,8 +205,8 @@ def install_grype() -> str:
IGNORED_DEPENDENCY_CVES = [ IGNORED_DEPENDENCY_CVES = [
# Python stdlib # Python stdlib
'CVE-2025-8194', # DoS in tarfile 'CVE-2025-8194', 'BIT-python-2025-8194', # DoS in tarfile
'CVE-2025-6069', # DoS in HTMLParser 'CVE-2025-6069', 'BIT-python-2025-6069', # DoS in HTMLParser
] ]
@ -222,7 +222,7 @@ def check_dependencies() -> None:
dest = os.path.join(SW, 'macos') dest = os.path.join(SW, 'macos')
os.makedirs(dest, exist_ok=True) os.makedirs(dest, exist_ok=True)
install_bundle(dest, os.path.basename(dest)) install_bundle(dest, os.path.basename(dest))
if (cp := subprocess.run([grype, '--config', gc, '--fail-on', 'medium', SW])).returncode != 0: if (cp := subprocess.run([grype, '--config', gc, '--only-fixed', '--fail-on', 'medium', SW])).returncode != 0:
raise SystemExit(cp.returncode) raise SystemExit(cp.returncode)
# Now test against the SBOM # Now test against the SBOM
import runpy import runpy
@ -233,7 +233,7 @@ def check_dependencies() -> None:
runpy.run_path('bypy-src') runpy.run_path('bypy-src')
sys.argv, sys.stdout = orig sys.argv, sys.stdout = orig
print(buf.getvalue()) print(buf.getvalue())
if (cp := subprocess.run([grype, '--config', gc, '--fail-on', 'medium'], input=buf.getvalue().encode())).returncode != 0: if (cp := subprocess.run([grype, '--config', gc, '--only-fixed', '--fail-on', 'medium'], input=buf.getvalue().encode())).returncode != 0:
raise SystemExit(cp.returncode) raise SystemExit(cp.returncode)

4
bypy/sources.json
View file

@ -86,12 +86,12 @@
}, },
{ {
"name": "sqlite 3500400", "name": "sqlite 3.50.4",
"spdx": "blessing", "spdx": "blessing",
"unix": { "unix": {
"file_extension": "tar.gz", "file_extension": "tar.gz",
"hash": "sha256:a3db587a1b92ee5ddac2f66b3edb41b26f9c867275782d46c3a088977d6a5b18", "hash": "sha256:a3db587a1b92ee5ddac2f66b3edb41b26f9c867275782d46c3a088977d6a5b18",
"urls": ["https://www.sqlite.org/2025/{name}-autoconf-{version}.{file_extension}"] "urls": ["https://www.sqlite.org/2025/{name}-autoconf-3500400.{file_extension}"]
} }
}, },