From 64dcf740bda410d26369fbad0740513dcdf1102b Mon Sep 17 00:00:00 2001 From: Fionna <13184582+fionnachan@users.noreply.github.com> Date: Tue, 6 Aug 2024 11:32:32 +0100 Subject: [PATCH] ci: ignore elliptic advisories --- audit-ci.jsonc | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/audit-ci.jsonc b/audit-ci.jsonc index 3b1ff2640..7a87fa4a7 100644 --- a/audit-ci.jsonc +++ b/audit-ci.jsonc @@ -104,6 +104,15 @@ // Issue with sol2uml library that generates UML diagrams from Solidity code. Only used at build time. // from: @offchainlabs/l1-l3-teleport-contracts>@arbitrum/nitro-contracts>sol2uml>axios // from: @offchainlabs/l1-l3-teleport-contracts>@arbitrum/token-bridge-contracts>@arbitrum/nitro-contracts>sol2uml>axios - "GHSA-wf5p-g6vw-rhxx" + "GHSA-wf5p-g6vw-rhxx", + // elliptic + // waiting for it to release a fix but low severity so we can ignore it + // from: @ethersproject/signing-key>elliptic + // https://github.com/advisories/GHSA-49q7-c7j4-3p7m + "GHSA-49q7-c7j4-3p7m", + // https://github.com/advisories/GHSA-977x-g7h5-7qgw + "GHSA-977x-g7h5-7qgw", + // https://github.com/advisories/GHSA-f7q4-pwc6-w24p + "GHSA-f7q4-pwc6-w24p" ] }