From 1ec016496af64de95762a60b5e0af65e51768c24 Mon Sep 17 00:00:00 2001 From: Michael Edgar Date: Wed, 10 Apr 2024 12:23:53 -0400 Subject: [PATCH] Ignore security scan of TrustAllCertificateManager (non-production code) Signed-off-by: Michael Edgar --- .snyk | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..1eb3298e2 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# See https://docs.snyk.io/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/exclude-directories-and-files-from-snyk-code-cli-tests +ignore: {} +version: v1.25.0 +patch: {} +exclude: + global: + # CWE-295 TrustAllCertificateManager is non-production code, therefore exclusion is reasonable + - ./api/src/main/java/com/github/eyefloaters/console/api/support/TrustAllCertificateManager.java