allow no signature
ignore cve properly