diff --git a/.github/workflows/snyk-monitor.yml b/.github/workflows/snyk-monitor.yml
index 5c6f5b722d..a6dc0d6e77 100644
--- a/.github/workflows/snyk-monitor.yml
+++ b/.github/workflows/snyk-monitor.yml
@@ -21,7 +21,6 @@ jobs:
           command: monitor
           args: >
             --yarn-workspaces
-            --policy-path=.snyk
             --org=backstage-dgh
             --strict-out-of-sync=false
             --remote-repo-url=https://github.com/backstage/backstage
diff --git a/.snyk b/packages/app/.snyk
similarity index 87%
rename from .snyk
rename to packages/app/.snyk
index 732671517a..8fbbfa574c 100644
--- a/.snyk
+++ b/packages/app/.snyk
@@ -3,7 +3,7 @@ version: v1.22.1
 # ignores vulnerabilities until expiry date; change duration by modifying expiry date
 ignore:
   SNYK-JS-ANSIHTML-1296849:
-    - '@backstage/cli > webpack-dev-server > ansi-html':
+    - 'webpack-dev-server > ansi-html':
         reason: Developer tools are not a valid target for ReDoS attacks
         expires: 2022-03-06T17:18:55.019Z
         created: 2021-09-06T17:18:55.027Z