Ignore security scan of TrustAllCertificateManager (non-production code)

Signed-off-by: Michael Edgar <[email protected]>
streamshub · Apr 10, 2024 · 1ec0164 · 1ec0164
1 parent 388caa1
commit 1ec0164
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.snyk b/.snyk
@@ -0,0 +1,8 @@
+# See https://docs.snyk.io/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/exclude-directories-and-files-from-snyk-code-cli-tests
+ignore: {}
+version: v1.25.0
+patch: {}
+exclude:
+  global:
+    # CWE-295 TrustAllCertificateManager is non-production code, therefore exclusion is reasonable
+    - ./api/src/main/java/com/github/eyefloaters/console/api/support/TrustAllCertificateManager.java