From 17194efde02ad054d0660cbf0066c295f5103759 Mon Sep 17 00:00:00 2001 From: Akash Singhal Date: Thu, 16 Nov 2023 19:04:00 +0000 Subject: [PATCH] remove nested artifact verification --- .../samples/config_v1beta1_verifier_vulnerabilityreport.yaml | 3 +-- .../samples/config_v1beta1_verifier_vulnerabilityreport2.yaml | 3 +-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/config/samples/config_v1beta1_verifier_vulnerabilityreport.yaml b/config/samples/config_v1beta1_verifier_vulnerabilityreport.yaml index 1c348eae74..95c6dd6784 100644 --- a/config/samples/config_v1beta1_verifier_vulnerabilityreport.yaml +++ b/config/samples/config_v1beta1_verifier_vulnerabilityreport.yaml @@ -5,8 +5,7 @@ metadata: spec: name: vulnerabilityreport artifactTypes: application/sarif+json - parameters: - nestedReferences: application/vnd.cncf.notary.signature + parameters: maximumAge: 24h disallowedSeverity: - high diff --git a/config/samples/config_v1beta1_verifier_vulnerabilityreport2.yaml b/config/samples/config_v1beta1_verifier_vulnerabilityreport2.yaml index f0cdcfd205..e9b626e64a 100644 --- a/config/samples/config_v1beta1_verifier_vulnerabilityreport2.yaml +++ b/config/samples/config_v1beta1_verifier_vulnerabilityreport2.yaml @@ -5,8 +5,7 @@ metadata: spec: name: vulnerabilityreport artifactTypes: application/sarif+json - parameters: - nestedReferences: application/vnd.cncf.notary.signature + parameters: maximumAge: 24h denylistCVEs: - CVE-2021-44228 # Log4Shell