fix scan

.release/security-scan.hcl

@@ -1,10 +1,18 @@
-# Copyright (c) HashiCorp, Inc.
-# SPDX-License-Identifier: MPL-2.0
-
 binary {
-	secrets      = true
-	go_modules   = true
-	osv          = true
-	oss_index    = false
-	nvd          = false
+  secrets      = true
+  go_modules   = true
+  osv          = true
+  oss_index    = false
+  nvd          = false
+
+  triage {
+    suppress {
+      vulnerabilites = [
+        "GHSA-f5pg-7wfw-84q9", # AWS S3 Crypto SDK vuln https://osv.dev/vulnerability/GO-2022-0646
+        "GO-2022-0646", # alias
+        "GHSA-7f33-f4f5-xwgw", # AWS S3 Crypto SDK vuln https://osv.dev/vulnerability/GO-2022-0635
+        "GO-2022-0635" #alias
+      ]
+    }
+  }
 }