From b3ccc97df801d5284cf291f2cbc98dbe66901344 Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Thu, 9 Sep 2021 19:40:38 +0200 Subject: [PATCH] snyk: move .snyk into each package dir instead of a single root one Signed-off-by: Patrik Oldsberg --- .github/workflows/snyk-monitor.yml | 1 - .snyk => packages/app/.snyk | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) rename .snyk => packages/app/.snyk (87%) diff --git a/.github/workflows/snyk-monitor.yml b/.github/workflows/snyk-monitor.yml index 5c6f5b722d..a6dc0d6e77 100644 --- a/.github/workflows/snyk-monitor.yml +++ b/.github/workflows/snyk-monitor.yml @@ -21,7 +21,6 @@ jobs: command: monitor args: > --yarn-workspaces - --policy-path=.snyk --org=backstage-dgh --strict-out-of-sync=false --remote-repo-url=https://github.com/backstage/backstage diff --git a/.snyk b/packages/app/.snyk similarity index 87% rename from .snyk rename to packages/app/.snyk index 732671517a..8fbbfa574c 100644 --- a/.snyk +++ b/packages/app/.snyk @@ -3,7 +3,7 @@ version: v1.22.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: SNYK-JS-ANSIHTML-1296849: - - '@backstage/cli > webpack-dev-server > ansi-html': + - 'webpack-dev-server > ansi-html': reason: Developer tools are not a valid target for ReDoS attacks expires: 2022-03-06T17:18:55.019Z created: 2021-09-06T17:18:55.027Z