[Issue #3015] Ignore false positive CVEs (#3016)

## Summary Fixes #3015 ### Time to review: __1 mins__ ## Changes proposed We're running a newer than "fixed" version for these CVEs and we believe they're hitting on a false positive so we're ignoring them.
HHS · Nov 26, 2024 · 691bf66 · 691bf66
1 parent 822fe2e
commit 691bf66
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.grype.yml b/.grype.yml
@@ -23,3 +23,9 @@ ignore:
   - vulnerability: CVE-2024-34158
   - vulnerability: CVE-2024-34156
   - vulnerability: CVE-2024-34155
+
+  # https://github.com/HHS/simpler-grants-gov/issues/3015
+  - vulnerability: CVE-2024-10979
+  - vulnerability: CVE-2024-10978
+  - vulnerability: CVE-2024-10976
+  - vulnerability: CVE-2024-10977