Suppress false positive for GO-2026-5932

2026-10-05 06:03:17 -04:00 · 2026-07-10 12:00:15 +05:30
parent fbcc619a6b
commit ac32e5af33
1 changed files with 1 additions and 0 deletions
@@ -20,6 +20,7 @@ binary {
 		suppress {
 			vulnerabilities = [
 				"GO-2022-0635", // github.com/aws/[email protected] TODO(dduzgun-security): remove when deps is resolved
+				"GO-2026-5932", // golang.org/x/crypto - only affects the unmaintained openpgp subpackage (no fixed version); not imported by Packer, confirmed absent from the binary via govulncheck/symbol scan.
 			]
 		}
 	}