Skip to content

Commit 6f62660

Browse files
MGD-13107(fix): fix snyk authorization, add .snyk file (#187)
added .snyk file which includes vulnerabilities to ignore which are deemed not affecting the project, removed project attributes args from github workflow
1 parent 239ecdc commit 6f62660

4 files changed

Lines changed: 19 additions & 17 deletions

File tree

.github/workflows/container.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,3 +55,4 @@ jobs:
5555
--project-business-criticality=low
5656
--project-lifecycle=development
5757
--project-tags=team=team-se-cloud-automation
58+
--policy-path=.snyk

.github/workflows/snyk.yml

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -41,9 +41,4 @@ jobs:
4141
command: monitor
4242
args: >-
4343
--all-projects
44-
--target-reference=${{ github.ref_name }}
45-
--project-environment=external
46-
--project-lifecycle=development
47-
--project-business-criticality=low
48-
--project-tags=team=team-se-cloud-automation,ticket-creation=true
4944
--exclude=node_modules

.snyk

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities
2+
version: v1.25.0
3+
ignore:
4+
SNYK-JS-HONONODESERVER-18170326:
5+
- '*':
6+
reason: Server host is hosted only on Linux operating system, serve-static is not used

package-lock.json

Lines changed: 12 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)