Skip to content

Conversation

himanshusinghs
Copy link
Contributor

Description

As a sideeffect of Snyk now actually scanning project code (#1136) we have bumped into yet another issue. This time its about sbom tools not able to create vuln tickets.

Because we need to rollout a fix for #1149, I am disabling snyk temporarily with a todo ticket - VSCODE-706

Checklist

Motivation and Context

  • Bugfix
  • New feature
  • Dependency update
  • Misc

Open Questions

Dependents

Types of changes

  • Backport Needed
  • Patch (non-breaking change which fixes an issue)
  • Minor (non-breaking change which adds functionality)
  • Major (fix or feature that would cause existing functionality to change)

@himanshusinghs himanshusinghs requested a review from a team as a code owner October 7, 2025 11:36
@Copilot Copilot AI review requested due to automatic review settings October 7, 2025 11:36
@himanshusinghs himanshusinghs added the no-title-validation Skips validation of PR titles (conventional commit adherence + JIRA ticket inclusion) label Oct 7, 2025
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR temporarily disables Snyk vulnerability ticket generation and vulnerability reporting in the GitHub Actions workflow to address issues with SBOM tools creating vulnerability tickets. The change is documented with a TODO ticket (VSCODE-706) for future resolution.

  • Commented out the "Create Jira Tickets" step that generates vulnerability tickets
  • Commented out the "Generate Vulnerability Report" step that fails on high-severity vulnerabilities
  • Added a TODO comment referencing the tracking ticket VSCODE-706

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@himanshusinghs himanshusinghs merged commit 0f59b55 into main Oct 7, 2025
13 checks passed
@himanshusinghs himanshusinghs deleted the chore/disable-snyk branch October 7, 2025 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
no-title-validation Skips validation of PR titles (conventional commit adherence + JIRA ticket inclusion)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants