ci: suppress mpl license from snyk

The Snyk scan was failing on a warning with the
MPL 2.0 license, which is compatible with Rook.
Now the warnings are suppressed.

Signed-off-by: travisn <tnielsen@redhat.com>
(cherry picked from commit b718622919)
This commit is contained in:
travisn authored and Michael Adam committed 2023-09-28 11:37:39 +02:00
1 parent f4111f6286
commit e878caab41
1 file changed
+44 -2
+44 -2
View File
@@ -1,7 +1,49 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
ignore:
'snyk:lic:npm:symbol:MPL-2.0':
- '*':
"snyk:lic:golang:github.com:hashicorp:vault:sdk:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:vault:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:vault:api:auth:approle:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:vault:api:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:hcl:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:golang-lru:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-sockaddr:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-secure-stdlib:strutil:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-secure-stdlib:parseutil:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-rootcerts:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-retryablehttp:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-multierror:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-immutable-radix:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:go-cleanhttp:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
"snyk:lic:golang:github.com:hashicorp:errwrap:MPL-2.0":
- "*":
reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license
version: v1.25.0
patch: {}