From 28ca1a989f7da3dce0efdd257555d79ae0d01ecb Mon Sep 17 00:00:00 2001 From: Peter Lyons Date: Tue, 9 Apr 2019 10:49:53 -0600 Subject: [PATCH] chore: ignore snyk js-yaml vuln for 30 days Signed-off-by: Peter Lyons --- .snyk | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index cc78294f51..a63d428662 100644 --- a/.snyk +++ b/.snyk @@ -1,4 +1,9 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.3 +version: v1.13.4 patch: {} -ignore: {} +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + SNYK-JS-JSYAML-174129: + - '@reactioncommerce/components > react-select > emotion > babel-plugin-emotion > babel-plugin-macros > cosmiconfig > js-yaml': + reason: No easy update path near term + expires: '2019-05-09T16:47:09.529Z'