diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..dad0ad56b --- /dev/null +++ b/.snyk @@ -0,0 +1,21 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: + SNYK-GOLANG-GITHUBCOMJACKCPGPROTO3-6371506: + - "*" + reason: Not a runtime dependency + SNYK-GOLANG-GITHUBCOMMATTNGOSQLITE3-6139875 + - "*" + reason: Not a runtime dependency + SNYK-GOLANG-GITHUBCOMDOCKERDOCKERLIBNETWORK-6474507: + - "*" + reason: Not a runtime dependency + CWE-89: + - manager > controllers > utils.go: + reason: Parameter input is checked in a map, not used directly + CWE-918: + - turnpike>controllers>admin.go: + reason: Internal API + CWE-295: + - base>mqueue>mqueue_impl_gokafka.go: + reason: Allowed only if explicitly set