Skip to content

Add Snyk file to ignore specific unmaintained vendor packages#85

Merged
josue merged 1 commit intomainfrom
add_snyk_file
Feb 6, 2026
Merged

Add Snyk file to ignore specific unmaintained vendor packages#85
josue merged 1 commit intomainfrom
add_snyk_file

Conversation

@josue
Copy link
Collaborator

@josue josue commented Feb 6, 2026

Description

Add a .snyk file to ignore 57 vulnerabilities from unmaintained vendor packages. These vulnerabilities are flagged in transitive dependencies that have no available patches from their maintainers, requiring Golang 1.25.7.

Motivation and Context

Snyk scans are reporting vulnerabilities in vendor packages that cannot be resolved because the upstream maintainers have not released patches. This .snyk file explicitly ignores these known issues to reduce noise in security scans while documenting the reason for each exclusion.

How Has This Been Tested?

  • Verified the .snyk file follows valid YAML syntax
  • Confirmed vulnerability IDs match those reported by Snyk

Screenshots (if appropriate):

N/A

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation (update or addition to documentation for this project)

Checklist:

  • My code follows the code style of this project.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

@flume-bot
Copy link

flume-bot commented Feb 6, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@josue josue marked this pull request as ready for review February 6, 2026 14:49
@josue josue requested a review from caseyh as a code owner February 6, 2026 14:49
@josue josue merged commit 20f7bec into main Feb 6, 2026
8 checks passed
@josue josue deleted the add_snyk_file branch February 6, 2026 16:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

Comments