chore: ignore snyk js-yaml vuln for 30 days

Signed-off-by: Peter Lyons <[email protected]>
reactioncommerce · Apr 9, 2019 · 28ca1a9 · 28ca1a9
1 parent 4ae96e6
commit 28ca1a9
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/.snyk b/.snyk
@@ -1,4 +1,9 @@
 # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
-version: v1.13.3
+version: v1.13.4
 patch: {}
-ignore: {}
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JS-JSYAML-174129:
+    - '@reactioncommerce/components > react-select > emotion > babel-plugin-emotion > babel-plugin-macros > cosmiconfig > js-yaml':
+        reason: No easy update path near term
+        expires: '2019-05-09T16:47:09.529Z'