Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add CVE-2022-27664 to allowlist #431

Merged
merged 3 commits into from
Sep 21, 2022
Merged

Add CVE-2022-27664 to allowlist #431

merged 3 commits into from
Sep 21, 2022

Conversation

mocsharp
Copy link
Collaborator

@mocsharp mocsharp commented Sep 20, 2022 •
edited

Description

Add CVE-2022-27664 to allowlist; mc.exe is included only for running minio admin functionalities and not open for http/http2 connections.

Status

Ready

Types of changes

  • Non-breaking change (fix or new feature that would not break existing functionality).
  • Breaking change (fix or new feature that would cause existing functionality to change).
  • New tests added to cover the changes.
  • All tests passed locally.
  • Documentation comments included/updated.

@mocsharp
Add CVE-2022-27664 to allowlist
90d1c0a 
Signed-off-by: Victor Chang <vicchang@nvidia.com>
@mocsharp mocsharp self-assigned this Sep 20, 2022
RemakingEden
RemakingEden approved these changes Sep 21, 2022
View reviewed changes
Copy link
Member

@RemakingEden RemakingEden left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it would be good to have a greater conversation around where we want container scanning to be in the pipeline. Not sure it makes sense on every push.

@sonarcloud
Copy link

sonarcloud bot commented Sep 21, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@mocsharp mocsharp merged commit 76a24dd into develop Sep 21, 2022
@mocsharp mocsharp deleted the vchang/CVE-2022-27664 branch September 21, 2022 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@RemakingEden RemakingEden RemakingEden approved these changes

@jackschofield23 jackschofield23 jackschofield23 approved these changes

@neildsouth neildsouth neildsouth approved these changes

Assignees

@mocsharp mocsharp

Labels
security
Projects
Clinical Data Pipelines
Status: Done
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@mocsharp @RemakingEden @jackschofield23 @neildsouth