SECURITY: add a section describing how we handle snyk policies

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2021-09-09 20:08:09 +02:00
parent 7500bc86ea
commit c414c907cb
2 changed files with 15 additions and 0 deletions
@@ -10,6 +10,11 @@ on:
      - '**/package.json'
      - 'yarn.lock'

+# This workflow synchronizes the packages in this repo along with policies in
+# each .snyk file with the remote state in our snyk org. It allows us to define
+# ignore policies in the .snyk files and then have them show up in the snyk web
+# UI, and also automatically adds any new packages that are created.
+
 jobs:
  sync:
    runs-on: ubuntu-latest