From d7ad981b894f5a5fbaab46a9b1080de82322e48e Mon Sep 17 00:00:00 2001
From: kitos <kitos@aegis.local>
Date: Wed, 24 Jun 2026 14:37:46 +0200
Subject: [PATCH] chore(snyk): exclude test fixtures and scripts from Snyk Code
 SAST scanning

---
 .snyk | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..ec61e4b
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,11 @@
+# Snyk (https://snyk.io) policy file
+version: v1.25.0
+
+# Snyk Code — exclude paths from SAST scanning
+exclude:
+  code:
+    # Test fixtures use hardcoded credentials against an in-memory SQLite DB.
+    # These are test-only and carry no production risk.
+    - backend/tests/**
+    # Utility scripts use env-var credentials with safe defaults for local dev only.
+    - scripts/**