diff --git a/plugins/todo-backend/.snyk b/plugins/todo-backend/.snyk
new file mode 100644
index 0000000000..da6c67e8e2
--- /dev/null
+++ b/plugins/todo-backend/.snyk
@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.22.1
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JS-ANSIREGEX-1583908:
+    - 'leasot@12.0.0 > strip-ansi@6.0.0 > ansi-regex@5.0.0':
+        reason: This vulnerability only affects the leasot CLI, which is not used by todo backend
+        expires: 2022-03-06T17:18:55.019Z
+        created: 2021-09-06T17:18:55.027Z
+patch: {}