Skip to content

Commit 95f1c69

Browse files
committed
add .snyk file
add project `.snyk` file, ignoring `Dockerfile`
1 parent 2993efd commit 95f1c69

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

.snyk

+11
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
exclude:
2+
global:
3+
# The project Dockerfile is only used to orchestrate container usage for
4+
# local development with containers that are not to be exposed to the
5+
# outside world. We use vanilla "ruby" images and do not layer on any
6+
# additional software dependencies or configurations ourselves that would
7+
# change the original "ruby" images' security profile. We defer all
8+
# security mitigation for the images to the "ruby" image maintainers (who
9+
# themselves are periodically updating their base Ubuntu layers to mitigate
10+
# issues).
11+
- Dockerfile

0 commit comments

Comments
 (0)