Skip to content

Commit dfdc638

Browse files
committed
exclude examples, apimachinery samples, from sast/snyk scan
None of our examples are items that run in any of the images produced for shared resources csi driver. They are simply artifact users can employ when trying out the system, learning what it can do. Also, the 'vendor/k8s.io/apimachinery/pkg/util/managedfields/pod.yaml' cited by the scan is a sample from that component as well. you'll see it creates the pod "some-name" in the default namespace
1 parent 83c961e commit dfdc638

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

.snyk

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,8 @@
33
# https://docs.snyk.io/snyk-cli/commands/ignore
44
exclude:
55
global:
6-
- vendor/**
6+
# all yamls, including the pod ones, in our examples directory are simply samples for users trying shared resources out; these artifacts are not created by any of the images
7+
- examples/**
8+
# this pod.yaml in apimachinery is just another sample that is never created by our images; you'll see it creates the pod "some-name" in the default namespace
9+
- vendor/k8s.io/apimachinery/pkg/util/managedfields/pod.yaml
10+
- unpacked_remote_sources/cachito-gomod-with-deps/app/vendor/k8s.io/apimachinery/pkg/util/managedfields/pod.yaml

0 commit comments

Comments
 (0)