add support ignore file oss

[cx-itay-paz]

No description provided.

[github-actions]

Checkmarx One – Scan Summary & Details – 9ef9bf0a-6688-4ebe-9f95-3c0cf3337645

New Issues (8)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	Cx6057d4e5-4760	Npm-coa-3.1.3	details Description: This package was manually inspected by a security researcher and flagged as malicious ### About Classifying malicious packages is an internal proc... ID: pgiyzn7arKvKK2h0bXzJw4rGsblWY1GLnoi1b8qiK2g%3D Vulnerable Package
	Cx657a3ff1-7b92	Npm-coa-3.1.3	details Description: This package downloads a harmful file. File hash: ```7f986cd3c946f274cdec73f80b84855a77bc2a3c765d68897fbc42835629a5d5``` ### About Using a dynamic... ID: jB%2B7S99v%2FtziNvPXfDBjWafF%2BHnJ3AtGXe6ZGtcFZOU%3D Vulnerable Package
	Cxa079aba6-fc3c	Npm-coa-3.1.3	details Description: This package exfiltrates stored credentials and sensitive information ### About Data exfiltration may be done in numerous ways such as through HTT... ID: Ccbduku5vWEf4M95XTdKOzvXf5YDXpEfHvpdckjKBQM%3D Vulnerable Package
	Cxb34b508c-969f	Npm-coa-3.1.3	details Description: This package exfiltrates computer and operating system information ### About Data exfiltration may be done in numerous ways such as through HTTP r... ID: MYVh1otCKvLLYLjxEJIHgeE5xZdWsGoOYLCP7fCw990%3D Vulnerable Package
	Cxb5dfb167-23a8	Npm-coa-3.1.3	details Description: The npm package coa had versions published with malicious code. Users of affected versions (2.0.3 and above) should downgrade to 2.0.2 as soon as p... Attack Vector: NETWORK Attack Complexity: LOW ID: NsXzRHYxs2GisPd3p70l3m%2FGUNxiUNOvIZIomNu6qIA%3D Vulnerable Package
	Cxbd621f75-d5df	Npm-coa-3.1.3	details Description: This package downloads a harmful file. File hash: ```ea131cc5ccf6aa6544d6cb29cdb78130feed061d2097c6903215be1499464c2e``` ### About Using a dynamic... ID: YMR6C2n6x9SwtqYvsGvaqRv3rhk1FIz0L4Iv9qGCSaY%3D Vulnerable Package
	Cxc2338b3a-b052	Npm-coa-3.1.3	details Description: This package downloads a harmful file. File hash: ```2a3acdcd76575762b18c18c644a745125f55ce121f742d2aad962521bc7f25fd``` ### About Using a dynamic... ID: bQ1jhHudLVKlPiT12%2FbfHrSJ5DIzncWXz0G949H0%2FZw%3D Vulnerable Package
	Cxc56b90ed-4804	Npm-coa-3.1.3	details Description: This package executes a crypto mining software ### About Using a dynamic analysis environment (also known as a Sandbox) we can monitor filesystem ... ID: 6B2AKtHQBmqRsAsX2YDkGl4fXl2Lm7Gh0GhuZRxPtxE%3D Vulnerable Package