chore(snyk): exclude test fixtures and scripts from Snyk Code SAST scanning
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
This commit is contained in:
@@ -0,0 +1,11 @@
|
||||
# Snyk (https://snyk.io) policy file
|
||||
version: v1.25.0
|
||||
|
||||
# Snyk Code — exclude paths from SAST scanning
|
||||
exclude:
|
||||
code:
|
||||
# Test fixtures use hardcoded credentials against an in-memory SQLite DB.
|
||||
# These are test-only and carry no production risk.
|
||||
- backend/tests/**
|
||||
# Utility scripts use env-var credentials with safe defaults for local dev only.
|
||||
- scripts/**
|
||||
Reference in New Issue
Block a user