Merge pull request #7126 from backstage/rugvip/snyk-docs

security: add a section describing how we handle snyk policies
2021-09-09 21:18:50 +02:00
parent 8dd72d6163 c414c907cb
commit 8657985dca
2 changed files with 15 additions and 0 deletions
@@ -10,6 +10,11 @@ on:
      - '**/package.json'
      - 'yarn.lock'

+# This workflow synchronizes the packages in this repo along with policies in
+# each .snyk file with the remote state in our snyk org. It allows us to define
+# ignore policies in the .snyk files and then have them show up in the snyk web
+# UI, and also automatically adds any new packages that are created.
+
 jobs:
  sync:
    runs-on: ubuntu-latest