From 470df7a1e9da7ff888b6e324c3c1354bd30e67ce Mon Sep 17 00:00:00 2001 From: Steve Smith Date: Tue, 2 Mar 2021 15:07:52 +1100 Subject: [PATCH] Add ignores for GPL-3.0 licensing as it is a runtime tool-chain, not a distributed or linked. --- .snyk | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..cfa80cb --- /dev/null +++ b/.snyk @@ -0,0 +1,13 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + 'snyk:lic:pip:ansible:GPL-3.0': + - '*': + reason: 'Not a shipped or linked dependency, only retrieved at run-time.' + expires: 2022-03-01T00:00:00.000Z + 'snyk:lic:pip:ansible-base:GPL-3.0': + - '*': + reason: 'Not a shipped or linked dependency, only retrieved at run-time.' + expires: 2022-03-01T00:00:00.000Z +patch: {}