fix: Don't use the actual redis or grpc CPEs for gems (#1926)

Signed-off-by: Dan Luhring <dluhring@chainguard.dev>
This commit is contained in:
Dan Luhring
2023-07-10 10:24:42 -04:00
committed by GitHub
parent 376c42893b
commit c0c089ffd5
@@ -461,6 +461,17 @@ var defaultCandidateRemovals = buildCandidateRemovalLookup(
VendorsToRemove: []string{"gradle"},
},
},
// Ruby packages
{
pkg.GemPkg,
candidateKey{PkgName: "redis"},
candidateRemovals{ProductsToRemove: []string{"redis"}},
},
{
pkg.GemPkg,
candidateKey{PkgName: "grpc"},
candidateRemovals{ProductsToRemove: []string{"grpc"}},
},
})
// buildCandidateLookup is a convenience function for creating the defaultCandidateAdditions set