Add version of go and ignore gems when checking for CVEs (#2987)

joaopapereira · web-flow · commit 03f965706309 · 2024-07-03T11:03:03.000-07:00
The only Gemfiles that we have currently are under fixtures which are
not used in our code so it is safe to ignore them

Signed-off-by: João Pereira &lt;joaod@vmware.com&gt;
diff --git a/.grype.yaml b/.grype.yaml
@@ -0,0 +1,3 @@
+ignore:
+  - package:
+      type: gem
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module code.cloudfoundry.org/cli
 
-go 1.22
+go 1.22.5
 
 require (
 	code.cloudfoundry.org/bytefmt v0.0.0-20230612151507-41ef4d1f67a4

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+ignore:`
	`2`	`+ - package:`
	`3`	`+ type: gem`