snyk: move .snyk into each package dir instead of a single root one
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
@@ -21,7 +21,6 @@ jobs:
|
||||
command: monitor
|
||||
args: >
|
||||
--yarn-workspaces
|
||||
--policy-path=.snyk
|
||||
--org=backstage-dgh
|
||||
--strict-out-of-sync=false
|
||||
--remote-repo-url=https://github.com/backstage/backstage
|
||||
|
||||
@@ -3,7 +3,7 @@ version: v1.22.1
|
||||
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
||||
ignore:
|
||||
SNYK-JS-ANSIHTML-1296849:
|
||||
- '@backstage/cli > webpack-dev-server > ansi-html':
|
||||
- 'webpack-dev-server > ansi-html':
|
||||
reason: Developer tools are not a valid target for ReDoS attacks
|
||||
expires: 2022-03-06T17:18:55.019Z
|
||||
created: 2021-09-06T17:18:55.027Z
|
||||
Reference in New Issue
Block a user