wehub-resource-sync
bf2343b7e4
Integration Tests - MySQL + Elasticsearch / Detect Changes (push) Waiting to run
Integration Tests - MySQL + Elasticsearch / integration-tests-mysql-elasticsearch (push) Blocked by required conditions
Integration Tests - PostgreSQL + Elasticsearch + Redis / Detect Changes (push) Waiting to run
Integration Tests - PostgreSQL + Elasticsearch + Redis / integration-tests-postgres-elasticsearch-redis (push) Blocked by required conditions
Integration Tests - PostgreSQL + OpenSearch / Detect Changes (push) Waiting to run
Integration Tests - PostgreSQL + OpenSearch / integration-tests-postgres-opensearch (push) Blocked by required conditions
Java Checkstyle / java-checkstyle (push) Waiting to run
Maven Collate Tests / maven-collate-ci (push) Waiting to run
OpenMetadata Service Unit Tests / Detect Changes (push) Waiting to run
OpenMetadata Service Unit Tests / openmetadata-service-unit-tests (push) Blocked by required conditions
OpenMetadata Service Unit Tests / k8s_operator-unit-tests (push) Blocked by required conditions
OpenMetadata Service Unit Tests / openmetadata-service-unit-tests-status (push) Blocked by required conditions
Publish Package to Maven Central Repository / publish-maven-packages (push) Waiting to run
49 lines
2.2 KiB
Plaintext
49 lines
2.2 KiB
Plaintext
# Snyk policy file for the OpenMetadata repo root.
|
|
#
|
|
# This file is read by Snyk scans that run FROM REPO ROOT. Currently
|
|
# that means the snyk-server-report target (see Makefile):
|
|
# snyk test --all-projects ... (Snyk Open Source / SCA)
|
|
# snyk code test --all-projects ... (Snyk Code / SAST)
|
|
# and the snyk-ui-report target which scans the UI yarn.lock.
|
|
#
|
|
# Paths in `exclude.global` below are relative to THIS file's directory
|
|
# (the repo root). So an ingestion path looks like `ingestion/foo/**`.
|
|
#
|
|
# IMPORTANT: there is a SECOND policy file at `ingestion/.snyk`. It is
|
|
# read by the snyk-ingestion-report target, which runs
|
|
# `cd ingestion; snyk code test ...`. Snyk Code only reads a .snyk
|
|
# file from its own CWD, with no `--policy-path` and no `--exclude`
|
|
# flag available on the Code subcommand. So a pattern added here that
|
|
# lives under `ingestion/` will NOT be applied by that scan unless it
|
|
# is also added (without the `ingestion/` prefix) to `ingestion/.snyk`.
|
|
# Keep the two files in sync for any path under `ingestion/`.
|
|
#
|
|
# The same dual-file rule would apply to `openmetadata-airflow-apis/`
|
|
# if that scan ever needs path exclusions. The dedicated airflow scan
|
|
# also runs from a subdirectory and would need its own .snyk there.
|
|
#
|
|
# Snyk docs on .snyk policy lookup and Snyk Code excludes:
|
|
# https://docs.snyk.io/manage-risk/policies/the-.snyk-file
|
|
# https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/exclude-directories-and-files-from-snyk-code-cli-tests
|
|
|
|
version: v1.25.0
|
|
ignore: {}
|
|
patch: {}
|
|
exclude:
|
|
global:
|
|
# Ingestion (Python). When you add or change anything in this block,
|
|
# MIRROR THE CHANGE IN `ingestion/.snyk` with the same pattern minus
|
|
# the `ingestion/` prefix. Both files must list the exclusion for
|
|
# both Snyk Code scans to honour it.
|
|
- ingestion/examples/**
|
|
- ingestion/tests/**
|
|
- ingestion/src/_openmetadata_testutils/**
|
|
- ingestion/src/metadata/sdk/examples/**
|
|
|
|
# UI (TypeScript) test mocks.
|
|
- openmetadata-ui/src/main/resources/ui/src/pages/service/mocks/**
|
|
- openmetadata-ui/src/main/resources/ui/src/components/common/TestConnection/TestConnection.mock.ts
|
|
|
|
# Server (Java) test fixtures.
|
|
- openmetadata-service/src/test/**
|