paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 24 Packages Projects Releases Wiki Activity

cli,codemods: update security policies

Browse Source 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
Patrik Oldsberg
2022-02-15 23:04:50 +01:00
parent c63dff303c
commit 9035dbe289
2 changed files with 22 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/cli/.snyk
+10 -25
View File
@@ -3,80 +3,65 @@ version: v1.22.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
SNYK-JS-ANSIHTML-1296849:
- 'webpack-dev-server > ansi-html':
- webpack-dev-server > ansi-html:
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-ANSIREGEX-1583908:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-CSSWHAT-1298035:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-BROWSERSLIST-1090194:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-ISSVG-1243891:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-ISSVG-1085627:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-POSTCSS-1255640:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-POSTCSS-1090595:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-WS-1296835:
- '*':
reason: Developer tools are not a valid target for ReDoS attacks
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-IMMER-1540542:
- '*':
reason: Prototype pollution is not an effective attack against a CLI as it already executes arbitrary code
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-SETVALUE-1540541:
- '*':
reason: Prototype pollution is not an effective attack against a CLI as it already executes arbitrary code
expires: 2022-03-06T17:18:55.019Z
created: 2021-09-06T17:18:55.027Z
'snyk:lic:npm:rollup-plugin-dts:LGPL-3.0':
- '*':
reason: Backstage itself does not redistribute this dependency in minified form
reason: This is a development dependency only and is therefore acceptable
expires: 2031-09-06T17:18:55.027Z
created: 2021-09-06T17:18:55.027Z
'snyk:lic:npm:axe-core:MPL-2.0':
- '*':
reason: Backstage itself does not redistribute this dependency in minified form
reason: This is a development dependency only and is therefore acceptable
expires: 2031-09-06T17:18:55.027Z
created: 2021-09-06T17:18:55.027Z
SNYK-JS-UNSETVALUE-2400660:
- '*':
reason: >-
The pollution in this vulnerability does not allow injection of
arbitrary values and is therefore a negligible risk for a CLI.
expires: 2022-08-17T21:54:43.658Z
created: 2022-02-15T21:54:43.668Z
patch: {}
packages/codemods/.snyk
+12
View File
@@ -0,0 +1,12 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.22.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
SNYK-JS-UNSETVALUE-2400660:
- '*':
reason: >-
The pollution in this vulnerability does not allow injection of
arbitrary values and is therefore a negligible risk for a CLI.
expires: 2022-08-17T21:54:43.658Z
created: 2022-02-15T21:54:43.668Z
patch: {}