From 93a21141f3c161a78309753ac24e5b4b4e849758 Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Mon, 6 Sep 2021 19:19:48 +0200 Subject: [PATCH] add .snyk with an ignored vulnerability Signed-off-by: Patrik Oldsberg --- .snyk | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000000..732671517a --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + SNYK-JS-ANSIHTML-1296849: + - '@backstage/cli > webpack-dev-server > ansi-html': + reason: Developer tools are not a valid target for ReDoS attacks + expires: 2022-03-06T17:18:55.019Z + created: 2021-09-06T17:18:55.027Z +patch: {}