Add ignores for GPL-3.0 licensing as it is a runtime tool-chain, not a distributed or linked.

This commit is contained in:
Steve Smith
2021-03-02 15:07:52 +11:00
parent d9e02990af
commit 470df7a1e9

13
.snyk Normal file
View File

@@ -0,0 +1,13 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.14.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
'snyk:lic:pip:ansible:GPL-3.0':
- '*':
reason: 'Not a shipped or linked dependency, only retrieved at run-time.'
expires: 2022-03-01T00:00:00.000Z
'snyk:lic:pip:ansible-base:GPL-3.0':
- '*':
reason: 'Not a shipped or linked dependency, only retrieved at run-time.'
expires: 2022-03-01T00:00:00.000Z
patch: {}