Fix snyk timeout

tidepool-org · Jan 19, 2024 · e8dd104 · e8dd104
1 parent 4a3bf45
commit e8dd104
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -10,7 +10,7 @@ jobs:
       env:
         SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
       with:
-        args: snyk ignore --id=SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908 --expiry=2024-04-16 --policy-path=.snyk
+        args: --dev --org=tidepool
     - name: Send vulnerability data to snyk
       uses: snyk/actions/golang@master
       env:

diff --git a/.snyk b/.snyk
@@ -0,0 +1,9 @@
+ignore:
+  'SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908':
+    - '*':
+        reason: 'Protobuf is not used in this project'
+        expires: '2024-04-16'
+  'SNYK-GOLANG-GOLANGORGXNETHTTP2-6173321':
+    - '*':
+        reason: 'Fix is available in https://github.com/tidepool-org/hydrophone/pull/131'
+        expires: '2024-04-16'