# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.22.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
  SNYK-JS-ANSIREGEX-1583908:
    - '*':
        reason: >-
          Code is only run client-side in the swagger-ui endpoint. No risk of
          server-side DoS.
  SNYK-CC-K8S-44:
    - 'manifests/core-install.yaml > *':
        reason: >-
          Argo CD needs wide permissions to manage resources.
    - 'manifests/install.yaml > *':
        reason: >-
          Argo CD needs wide permissions to manage resources.
  SNYK-JS-MOMENT-2440688:
    - '*':
        reason: >-
          Code is only run client-side. No risk of directory traversal.
patch: {}