From ac32e5af33352e6bf4547a689bf05fc435ff1cad Mon Sep 17 00:00:00 2001 From: Tanmay Jain Date: Fri, 10 Jul 2026 12:00:15 +0530 Subject: [PATCH] Suppress false positive for GO-2026-5932 --- .release/security-scan.hcl | 1 + 1 file changed, 1 insertion(+) diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl index e10d6e32b..c8aec0a83 100644 --- a/.release/security-scan.hcl +++ b/.release/security-scan.hcl @@ -20,6 +20,7 @@ binary { suppress { vulnerabilities = [ "GO-2022-0635", // github.com/aws/aws-sdk-go@v1.55.5 TODO(dduzgun-security): remove when deps is resolved + "GO-2026-5932", // golang.org/x/crypto - only affects the unmaintained openpgp subpackage (no fixed version); not imported by Packer, confirmed absent from the binary via govulncheck/symbol scan. ] } }