forked from zhmcclient/zhmc-ansible-modules
-
Notifications
You must be signed in to change notification settings - Fork 0
/
.safety-policy.yml
127 lines (122 loc) · 6.32 KB
/
.safety-policy.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
# Safety policy file
# For documentation, see https://docs.pyup.io/docs/safety-20-policy-file
# Configuration for the 'safety check' command
security:
# Ignore certain severities.
# A number between 0 and 10, with the following significant values:
# - 9: ignore all vulnerabilities except CRITICAL severity
# - 7: ignore all vulnerabilities except CRITICAL & HIGH severity
# - 4: ignore all vulnerabilities except CRITICAL, HIGH & MEDIUM severity
ignore-cvss-severity-below: 0
# Ignore unknown severities.
# Should be set to False.
ignore-cvss-unknown-severity: False
# List of specific vulnerabilities to ignore.
# {id}: # vulnerability ID
# reason: {text} # optional: Reason for ignoring it. Will be reported in the Safety reports
# expires: {date} # optional: Date when this ignore will expire
ignore-vulnerabilities:
38932:
reason: Fixed cryptography version requires Python>=3.6 and is used there
39525:
reason: Fixed Jinja2 version is not used by Ansible sanity test
39606:
reason: Fixed cryptography version requires Python==2.7 or Python>=3.6 and is used there
39611:
reason: PyYAML full_load method or FullLoader is not used
39621:
reason: Fixed Pylint version is not used by Ansible sanity test
40291:
reason: Fixed Pip version requires Python>=3.6 and is used there
42559:
reason: Fixed Pip version requires Python>=3.6 and is used there; Pip is not shipped with this package
42923:
reason: Fixed Ansible version is sated to be 0 (invalid issue)
42926:
reason: Fixed Ansible version is 3.0 but we need to support Ansible 2.9
43975:
reason: Fixed Urllib3 versions are excluded by requests
45185:
reason: Fixed Pylint version is not used by Ansible sanity test
51457:
reason: Py package is no longer being fixed (latest version 1.11.0)
51499:
reason: Fixed Wheel version requires Python>=3.7 and is used there; Risk is on Pypi side
52322:
reason: Fixed GitPython version requires Python>=3.7 and is used there
52365:
reason: Fixed Certifi version requires Python>=3.6 and is used there
52495:
reason: Fixed Setuptools version requires Python>=3.7 and is used there; Risk is on Pypi side
52518:
reason: Fixed GitPython version requires Python>=3.7 and is used there
53048:
reason: Fixed cryptography version requires Python>=3.6 and is used there
53298:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53299:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53301:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53302:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53303:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53304:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53305:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53306:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
53307:
reason: Fixed cryptography version 39.0.1 requires Python>=3.7 (fails on 3.6) and is used there
54219:
reason: Fixed ansible version is 2.10.0, but need to support ansible 2.9
54564:
reason: Fixed ansible version is 7.0.0, but need to support ansible 2.9
54229:
reason: Not yet fixed in any ansible version, but need to support ansible 2.9
54230:
reason: Not yet fixed in any ansible version, but need to support ansible 2.9
58755:
reason: Fixed requests version 2.31.0 requires Python>=3.7 and is used there
58910:
reason: Fixed pygments version 2.15.0 requires Python>=3.7 and is used there
39252:
reason: Fixed cryptography version 3.3 requires Python=2.7 or Python>=3.6 and is used there
59062:
reason: Fixed cryptography version 41.0.0 requires Python>=3.7 and is used there
59473:
reason: Fixed cryptography version 41.0.2 requires Python>=3.7 and is used there
59956:
reason: Fixed certifi version 2023.07.22 requires Python>=3.6 and is used there
60223:
reason: Fixed cryptography version 41.0.3 requires Python>=3.7 and is used there
60224:
reason: Fixed cryptography version 41.0.3 requires Python>=3.7 and is used there
60225:
reason: Fixed cryptography version 41.0.3 requires Python>=3.7 and is used there
60350:
reason: Fixed gitpython version 3.1.32 requires Python>=3.7 and is used there
60789:
reason: Fixed gitpython version 3.1.33 requires Python>=3.7 and is used there
60841:
reason: Fixed gitpython version 3.1.35 requires Python>=3.7 and is used there
61601:
reason: Fixed urllib3 version 1.26.17 requires Python>=3.6 and is used there
61893:
reason: Fixed urllib3 version 1.26.18 requires Python>=3.6 and is used there
62044:
reason: Fixed pip version 23.3 requires Python>=3.7 and is used there
62451:
reason: Fixed cryptography version 41.0.4 requires Python>=3.7 and is used there
62452:
reason: Fixed cryptography version 41.0.5 requires Python>=3.7 and is used there
62556:
reason: Fixed cryptography version 41.0.6 requires Python>=3.7 and is used there
62625:
reason: Fixed ansible version 4.1.0 requires Python>=3.5 and is used on Python>=3.9
63066:
reason: Fixed ansible-core version 2.15.8 requires Python>=3.9 and is used on Python>=3.12
# Continue with exit code 0 when vulnerabilities are found.
continue-on-vulnerability-error: False