Whitelist ClamAV finding for Kiali
-
Create a file called
clamav-whitelistin the affected project repository. -
Add the name of the finding to the file in the following format:
Html.Exploit.CVE_2016_7240-3. An example is shown here: https://repo1.dso.mil/dsop/checkmarx/cxlite/cxlite/-/blob/development/clamav-whitelist. -
Ensure that the
clamav-whitelistfile can only be changed or merged by those in theCODEOWNERSfile in the.gitlabdirectory within the repository. In order to do this, navigate to the./gitlab/CODEOWNERSfile and add the following:
[ClamAV Whitelist File]
clamav-whitelist @ironbank-security-team
- Add a CI/CD variable at the project level named
CLAMAV_WHITELISTwith a value of1.
Edited by gavin.scallon