ci: ignore elliptic advisories (#527)

OffchainLabs · Aug 6, 2024 · 792a7ee · 792a7ee
1 parent fd66cee
commit 792a7ee
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -104,6 +104,15 @@
     // Issue with sol2uml library that generates UML diagrams from Solidity code. Only used at build time.
     // from: @offchainlabs/l1-l3-teleport-contracts>@arbitrum/nitro-contracts>sol2uml>axios
     // from: @offchainlabs/l1-l3-teleport-contracts>@arbitrum/token-bridge-contracts>@arbitrum/nitro-contracts>sol2uml>axios
-    "GHSA-wf5p-g6vw-rhxx"
+    "GHSA-wf5p-g6vw-rhxx",
+    // elliptic
+    // waiting for it to release a fix but low severity so we can ignore it
+    // from: @ethersproject/signing-key>elliptic
+    // https://github.com/advisories/GHSA-49q7-c7j4-3p7m
+    "GHSA-49q7-c7j4-3p7m",
+    // https://github.com/advisories/GHSA-977x-g7h5-7qgw
+    "GHSA-977x-g7h5-7qgw",
+    // https://github.com/advisories/GHSA-f7q4-pwc6-w24p
+    "GHSA-f7q4-pwc6-w24p"
   ]
 }