Skip to content

Commit d4572aa

Browse files
ci: Temporarily ignore false positive Snyk vulnerability for jackc/pgx/v4 (argoproj#13406)
Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
1 parent 056ae0d commit d4572aa

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

.snyk

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities
2+
version: v1.25.0
3+
ignore:
4+
SNYK-GOLANG-GITHUBCOMJACKCPGXV4-7416900:
5+
- '*':
6+
reason: "False Positive: vuln is for pgx/v5, not pgx/v4: https://pkg.go.dev/vuln/GO-2024-2567"
7+
expires: 2024-09-01T11:11:11.001Z

0 commit comments

Comments
 (0)