Add version of go and ignore gems when checking for CVEs (#2987)

The only Gemfiles that we have currently are under fixtures which are not used in our code so it is safe to ignore them Signed-off-by: João Pereira <joaod@vmware.com>
cloudfoundry · Jul 3, 2024 · 03f9657 · 03f9657
1 parent 7653caf
commit 03f9657
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.grype.yaml b/.grype.yaml
@@ -0,0 +1,3 @@
+ignore:
+  - package:
+      type: gem
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module code.cloudfoundry.org/cli
 
-go 1.22
+go 1.22.5
 
 require (
 	code.cloudfoundry.org/bytefmt v0.0.0-20230612151507-41ef4d1f67a4