Merge pull request #1346 from GSA/snyk-exception

add snyk exception
GSA · May 17, 2024 · 14815ad · 14815ad
2 parents d67101e + 3263e4c
commit 14815ad
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/ckan/.snyk b/ckan/.snyk
@@ -63,4 +63,9 @@ ignore:
           No remediation available yet; Low severity.
         expires: 2024-10-24T17:24:47.251Z
         created: 2024-04-24T17:24:47.257Z
+  SNYK-PYTHON-WERKZEUG-6808933:
+    - '*':
+        reason: >-
+           Not affecting us since no debugger is enabled in cloud.gov apps
+        expires: 2024-06-31T16:20:58.017Z
 patch: {}
diff --git a/ckan/requirements.in b/ckan/requirements.in
@@ -125,3 +125,7 @@ cryptography>=42.0.4
 # lxml beyond 5.1.0 show error module 'lxml.etree' has no attribute '_ElementStringResult'
 # as in https://github.com/GSA/data.gov/issues/4681
 lxml==5.1.0
+
+# duplicate Werkzeug[watchdog]==2.0.3 requrements from ckan list
+# so that snyk doesn't complain about the version mismatch
+Werkzeug==2.0.3