chore: update advisories allowlist (#299)

OffchainLabs · Jun 16, 2023 · 5d8fd07 · 5d8fd07
1 parent abfc3ae
commit 5d8fd07
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -89,6 +89,12 @@
     // from: @arbitrum/nitro-contracts>@openzeppelin/contracts-upgradeable
     // from: @arbitrum/nitro-contracts>@openzeppelin/contracts
     // We don't use GovernorCompatibilityBravo
-    "GHSA-93hq-5wgc-jc82"
+    "GHSA-93hq-5wgc-jc82",
+    // https://github.com/advisories/GHSA-5h3x-9wvq-w4m2
+    // OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
+    // from: @arbitrum/nitro-contracts>@openzeppelin/contracts-upgradeable
+    // from: @arbitrum/nitro-contracts>@openzeppelin/contracts
+    // We don't use Governor or GovernorCompatibilityBravo
+    "GHSA-5h3x-9wvq-w4m2"
   ]
 }