othmane/ohif-viewer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): ignore decompress security vulnerability (#6125)

Browse Source
This commit is contained in:
Joe Boccanfuso 2026-07-07 19:58:15 +02:00 committed by GitHub
parent e381d22200
commit 333d73e334
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pnpm-workspace.yaml
View File

@ -24,7 +24,8 @@ verifyDepsBeforeRun: false
# fed user-supplied expressions. Kept in sync with the .circleci SECURITY_AUDIT
# job and the root `audit` script.
auditConfig:
ignoreGhsas: []
ignoreGhsas:
- GHSA-mp2f-45pm-3cg9 # decompress is called only ever decompresses a hash-pinned, hardcoded archive in a dev-only CLI
allowBuilds:
'@scarf/scarf': true