Ignore non-impactful runc CVE (#1047)

Signed-off-by: Natalie Arellano <narellano@vmware.com>
buildpacks · Mar 28, 2023 · a8db930 · a8db930
1 parent dc7b426
commit a8db930
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.grype.yaml b/.grype.yaml
@@ -1,3 +1,4 @@
 ignore:
   - vulnerability: CVE-2015-5237 # false positive, see https://github.com/anchore/grype/issues/558
   - vulnerability: CVE-2021-22570 # false positive, see https://github.com/anchore/grype/issues/558
+  - vulnerability: GHSA-vpvm-3wq2-2wvm # unpatched as of 3/28/23, non-impactful as the lifecycle doesn't create containers