security: add allowlist

Signed-off-by: Christian Kotzbauer <christian.kotzbauer@gmail.com>
ckotzbauer · Dec 20, 2020 · 8b9b96f · 8b9b96f
1 parent f39df98
commit 8b9b96f
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
@@ -0,0 +1,13 @@
+general:
+  vulnerabilities:
+    - CVE-2018-12886
+    - CVE-2019-15847
+    - CVE-2020-1751
+    - CVE-2020-1752
+    - CVE-2020-24659
+    - CVE-2019-12290
+    - CVE-2020-29361
+    - CVE-2020-29362
+    - CVE-2020-29363
+    - CVE-2019-3843
+    - CVE-2019-3844
diff --git a/Dockerfile b/Dockerfile
@@ -34,7 +34,6 @@ RUN apt-get update && \
     cp /download/conftest /tmp/k8spolicy && \
     rm -rf /download && \
 
-    apt-get upgrade -y && \
     apt-get remove -y wget && \
     apt-get autoremove -y && \
     rm -rf /var/lib/apt/lists/* && \