From 7c069d8832c55ee1b48bf367fe72c64848f8334a Mon Sep 17 00:00:00 2001
From: gabemontero <gmontero@redhat.com>
Date: Tue, 9 Jan 2024 15:27:10 -0500
Subject: [PATCH] add snyk config file for SAST scan

Per the documented policy from ART for the SAST scans, and following the pattern established in the openshift/oc repo, we are introducing a snyk config file that excludes the vendor tree, as that is currently some minor warnings.
---
 .snyk | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 00000000..fa9fd308
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,6 @@
+# References:
+# https://docs.snyk.io/scan-applications/snyk-code/using-snyk-code-from-the-cli/excluding-directories-and-files-from-the-snyk-code-cli-test
+# https://docs.snyk.io/snyk-cli/commands/ignore
+exclude:
+  global:
+    - vendor/**