update security-scan.hcl

.release/security-scan.hcl

@@ -2,15 +2,25 @@
 # SPDX-License-Identifier: MPL-2.0
 
 container {
-	dependencies = true
-	alpine_secdb = true
-	secrets      = true
+  dependencies = true
+  alpine_secdb = true
+  secrets      = true
 }
 
 binary {
-	secrets      = true
-	go_modules   = true
-	osv          = true
-	oss_index    = false
-	nvd          = false
+  secrets    = true
+  go_modules = true
+  osv        = true
+  oss_index  = false
+  nvd        = false
+
+  # Triage items that are _safe_ to ignore here. Note that this list should be
+  # periodically cleaned up to remove items that are no longer found by the scanner.
+  triage {
+    suppress {
+      vulnerabilities = [
+        "GO-2022-0635", // github.com/aws/[email protected]
+      ]
+    }
+  }
 }