From 99c839b51f29d22a514e49a38cc58f603f47e0a6 Mon Sep 17 00:00:00 2001 From: Johan Sydseter Date: Mon, 27 Jan 2025 11:48:53 +0100 Subject: [PATCH] Ignore GHSA-vg6x-rcgg-rjx6 adding comment --- .github/workflows/dependency-review.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index a230f000..b9a53e26 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -25,4 +25,5 @@ jobs: - name: 'Dependency Review' uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0 with: - allow-ghsas: + # Ignore GHSA-vg6x-rcgg-rjx6 as the dev server is not used for static projects other then for debugging locally + allow-ghsas: GHSA-vg6x-rcgg-rjx6,