chore(snyk): exclude test fixtures and scripts from Snyk Code SAST scanning
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
This commit is contained in:
@@ -0,0 +1,11 @@
|
|||||||
|
# Snyk (https://snyk.io) policy file
|
||||||
|
version: v1.25.0
|
||||||
|
|
||||||
|
# Snyk Code — exclude paths from SAST scanning
|
||||||
|
exclude:
|
||||||
|
code:
|
||||||
|
# Test fixtures use hardcoded credentials against an in-memory SQLite DB.
|
||||||
|
# These are test-only and carry no production risk.
|
||||||
|
- backend/tests/**
|
||||||
|
# Utility scripts use env-var credentials with safe defaults for local dev only.
|
||||||
|
- scripts/**
|
||||||
Reference in New Issue
Block a user