From 5ffb1048e81e6ac08763f09c7dea0bd9cf36d153 Mon Sep 17 00:00:00 2001 From: Michael Mraka Date: Thu, 26 Sep 2024 16:16:05 +0200 Subject: [PATCH 1/2] RHINENG-12951: ignore unused test only dependencies --- .snyk | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..5c43050ff --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: + SNYK-GOLANG-GITHUBCOMJACKCPGPROTO3-6371506: + - "*" + reason: Not a runtime dependency + SNYK-GOLANG-GITHUBCOMMATTNGOSQLITE3-6139875 + - "*" + reason: Not a runtime dependency + SNYK-GOLANG-GITHUBCOMDOCKERDOCKERLIBNETWORK-6474507: + - "*" + reason: Not a runtime dependency From b389bf41fd8be10533539ae0a48264b4bdf9368d Mon Sep 17 00:00:00 2001 From: Michael Mraka Date: Thu, 26 Sep 2024 16:38:25 +0200 Subject: [PATCH 2/2] RHINENG-12951: ignore false positive issues --- .snyk | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.snyk b/.snyk index 5c43050ff..dad0ad56b 100644 --- a/.snyk +++ b/.snyk @@ -10,3 +10,12 @@ ignore: SNYK-GOLANG-GITHUBCOMDOCKERDOCKERLIBNETWORK-6474507: - "*" reason: Not a runtime dependency + CWE-89: + - manager > controllers > utils.go: + reason: Parameter input is checked in a map, not used directly + CWE-918: + - turnpike>controllers>admin.go: + reason: Internal API + CWE-295: + - base>mqueue>mqueue_impl_gokafka.go: + reason: Allowed only if explicitly set