From ca02fd9c2a33e855937944110b37e70693b07f3e Mon Sep 17 00:00:00 2001
From: Samsondeen <40821565+dsa0x@users.noreply.github.com>
Date: Wed, 1 Apr 2026 12:51:38 +0200
Subject: [PATCH] Add aliases for false positive CVE (#38332)

---
 .release/security-scan.hcl | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
index 1eac1d23ea..0895f055f6 100644
--- a/.release/security-scan.hcl
+++ b/.release/security-scan.hcl
@@ -16,7 +16,11 @@ binary {
   triage {
     suppress {
       vulnerabilities = [
-        "GHSA-p77j-4mvh-x3m3"
+        // These vulnerabilities all point to the same issue.
+        // https://test.osv.dev/vulnerability/GO-2026-4762
+        "GHSA-p77j-4mvh-x3m3",
+        "GO-2026-4762",
+        "CVE-2026-33186",
       ]
     }
   }