Skip to content

Commit bbccdbe

Browse files
authored
add a snyk policy file (opendatahub-io#241)
We want the Snyk run to skip verification of the `benchmarks`, `examples` and `tests` directories because Snyk will report a variety of issues that are not relevant to the repository's code. An additional set of individual vulnerabilities in the rest of the source code are ignored at the Snyk server level, with reasons specified. The Snyk security scan on this PR shows that there are only a few individual issues remaining to be addressed. These are flagged in [INFERENG-985: Review issues of concern raised by Snyk security scan](https://issues.redhat.com/browse/INFERENG-985) for follow up.
2 parents 9d53384 + 05af243 commit bbccdbe

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

.snyk

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities
2+
version: v1.25.0
3+
exclude:
4+
global:
5+
- examples/
6+
- tests/
7+
- benchmarks/

0 commit comments

Comments
 (0)