Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update .snyk ignores #518

Merged
merged 1 commit into from
Dec 8, 2022
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 5 additions & 23 deletions .snyk
Original file line number Diff line number Diff line change
@@ -1,30 +1,12 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
version: v1.25.0
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
SNYK-PYTHON-BEAKER-575115:
- '*':
reason: >-
Beaker is used as a local cache; since the machines
are rebooted/recreated every 15 minutes the risk is
extremely minimal.
expires: 2021-12-30T06:00:00.000Z
SNYK-PYTHON-IPADDRESS-1290073:
- '*':
reason: >-
All input into system is from trusted and verified
government users (requires piv card), so risk is low.
expires: 2021-12-30T06:00:00.000Z
SNYK-PYTHON-IPADDRESS-590065:
- '*':
reason: >-
Dev-only requirement; hash conflict not a concern
in dev mode.
expires: 2021-11-25T06:00:00.000Z
SNYK-PYTHON-IPADDRESS-1041793:
- '*':
reason: >-
Dev-only requirement; Denial of service attack not
a concern in dev mode
expires: 2021-11-25T06:00:00.000Z
No remediation available yet; Not affecting us since the storage is
not accessible to any other client
expires: 2023-06-30T16:20:58.017Z
created: 2022-12-08T16:20:58.023Z
patch: {}