ci(osv): ignore GHSA-h7x2-h6g9-p789 until mlflow ships a fix

The advisory was modified 2026-08-31 and flags mlflow 3.13.0 through
3.15.2 with no fixed release published, so every osv-scan run fails
with nothing to bump. Same treatment as the existing diskcache entry.
This commit is contained in:
mateo-berri 2026-08-31 13:58:53 -07:00
parent ebdb54d4f0
commit db7eb641cb

View file

@ -2,3 +2,8 @@
id = "GHSA-w8v5-vhqr-4h9v"
ignoreUntil = 2026-09-09
reason = "diskcache has no fixed release published; remove this entry once one exists"
[[IgnoredVulns]]
id = "GHSA-h7x2-h6g9-p789"
ignoreUntil = 2026-09-14
reason = "mlflow has no fixed release published; remove this entry once one exists"