Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

USWDS-Site: Update snyk ignore #2383

Merged
merged 1 commit into from
Nov 30, 2023
Merged

USWDS-Site: Update snyk ignore #2383

merged 1 commit into from
Nov 30, 2023

Conversation

amyleadem
Copy link
Contributor

@amyleadem amyleadem commented Nov 30, 2023

Summary

Added inflight to the snyk ignore. Also updated the snyk ignores from yesterday so that the open vulnerabilities would be on the same schedule.

Problem statement

npx snyk test is throwing the following error:

  ✗ Missing Release of Resource after Effective Lifetime [High Severity][https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116] in [email protected]
    introduced by @uswds/[email protected] > [email protected] > [email protected] > [email protected] > [email protected] and 1 other path(s)
  No upgrade or patch available

Solution

Updated to ignore SNYK-JS-INFLIGHT-6095116. Ran the following in the command line:

npx snyk ignore --id="SNYK-JS-INFLIGHT-6095116" --reason="No available upgrade or patch"

Testing and review

  • To test, run npx snyk test and check for errors.

Reference

Ignoring Snyk alerts (Google docs 🔒)

@amyleadem amyleadem marked this pull request as ready for review November 30, 2023 20:05
@mejiaj mejiaj merged commit ba23f4f into main Nov 30, 2023
4 checks passed
@mejiaj mejiaj deleted the al-snyk-nov-2 branch November 30, 2023 20:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants