Don't use dot name for snyk policy file

cyber-dojo · Feb 28, 2024 · c304bfb · c304bfb
1 parent 2b2eb43
commit c304bfb
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/.snyk b/.snyk
diff --git a/sh/kosli.sh b/sh/kosli.sh
@@ -53,7 +53,7 @@ kosli_attest_snyk()
     --artifact-type=docker \
     --host="${hostname}" \
     --api-token="${api_token}" \
-    --attachments="$(repo_root)/.snyk" \
+    --attachments="$(repo_root)/snyk.policy" \
     --name=nginx.snyk-scan \
     --scan-results="$(repo_root)/snyk.json"
 }
@@ -95,7 +95,7 @@ on_ci_kosli_attest_snyk_scan_evidence()
     set +e
     snyk container test "$(artifact_name)" \
       --file="$(repo_root)/Dockerfile" \
-      --policy-path="$(repo_root)/.snyk" \
+      --policy-path="$(repo_root)/snyk.policy" \
       --sarif \
       --sarif-file-output=snyk.json \
       --severity-threshold=medium

diff --git a/snyk.policy b/snyk.policy
@@ -0,0 +1,3 @@
+# This file specifies snyk vulnerabilities to be ignored.
+# If this file contains only comments, then no vulnerabilities are ignored
+# but do not delete this file - it is needed for the live-snyk-scans repo workflows.