From e878caab417c15e8558383de6275ba99287c779d Mon Sep 17 00:00:00 2001 From: travisn Date: Tue, 26 Sep 2023 10:10:51 -0600 Subject: [PATCH] ci: suppress mpl license from snyk The Snyk scan was failing on a warning with the MPL 2.0 license, which is compatible with Rook. Now the warnings are suppressed. Signed-off-by: travisn (cherry picked from commit b718622919e48f579b27cf7124221019ae64fbdb) --- .snyk | 46 ++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 44 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 111c0fda9..c9c5fee12 100644 --- a/.snyk +++ b/.snyk @@ -1,7 +1,49 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. ignore: - 'snyk:lic:npm:symbol:MPL-2.0': - - '*': + "snyk:lic:golang:github.com:hashicorp:vault:sdk:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:vault:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:vault:api:auth:approle:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:vault:api:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:hcl:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:golang-lru:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-sockaddr:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-secure-stdlib:strutil:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-secure-stdlib:parseutil:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-rootcerts:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-retryablehttp:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-multierror:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-immutable-radix:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:go-cleanhttp:MPL-2.0": + - "*": + reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license + "snyk:lic:golang:github.com:hashicorp:errwrap:MPL-2.0": + - "*": reason: Mozilla Public License 2.0 is compatible with Rook's Apache 2.0 license version: v1.25.0 patch: {}