chore: add .snyk file to declaratively ignore irrelevant issues (#8599)

chore: add .snyk file to declaratively ignore irrelevant issues (#8599) Signed-off-by: Michael Crenshaw <[email protected]>
2026-10-07 08:44:50 +00:00 · 2022-03-10 12:53:52 -08:00
parent f12b2d40d7
commit a9bcbd7beb
2 changed files with 18 additions and 0 deletions
@@ -0,0 +1,18 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.22.1
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JS-ANSIREGEX-1583908:
+    - '*':
+        reason: >-
+          Code is only run client-side in the swagger-ui endpoint. No risk of
+          server-side DoS.
+  SNYK-CC-K8S-44:
+    - 'manifests/core-install.yaml > *':
+        reason: >-
+          Argo CD needs wide permissions to manage resources.
+    - 'manifests/install.yaml > *':
+        reason: >-
+          Argo CD needs wide permissions to manage resources.
+patch: {}
+