Add missing .snyk file

cyber-dojo · Sep 16, 2023 · 1f4626e · 1f4626e
1 parent a14244c
commit 1f4626e
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/.snyk b/.snyk
@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-ALPINE318-PROCPSNG-5877704:
+    - '*':
+        reason: Wait for fix in base image
+        expires: 2023-10-16T04:33:51.513Z
+        created: 2023-09-16T04:33:51.517Z
+patch: {}
diff --git a/sh/kosli.sh b/sh/kosli.sh
@@ -96,7 +96,7 @@ on_ci_kosli_report_snyk_scan_evidence()
     set +e
     snyk container test "$(artifact_name)" \
       --json-file-output=snyk.json \
-      --policy-path=.snyk
+      --policy-path="$(root_dir)/.snyk"
     set -e
 
     kosli_report_snyk_evidence "${KOSLI_HOST_STAGING}"