feat: Adding a .snyk config

DharmitD commented 1 year ago

Which issue is resolved by this Pull Request: Resolves https://github.com/red-hat-data-services/data-science-pipelines/issues/51

Description of your changes: Currently there are a lot of folders/paths in dsp that we do not user (e.g. tekton-catalog, or front end), we should look into adding a .snyk file to exclude these paths.

How is this tested:

Imported my fork of this repository into SNYK.
Tested a scan to find these issues, segregated by file paths:

https://github.com/opendatahub-io/data-science-pipelines/assets/46318816/bc776757-a4c5-402c-941a-26bc4bc87e95

Pushed the .snyk file with certain paths excluded to my fork and reran the SNYK check. The paths specified in the .snyk file didn't appear, as expected:

https://github.com/opendatahub-io/data-science-pipelines/assets/46318816/7072e434-e5a6-41d8-b493-08617dc03110

Checklist:

[x] The title for your pull request (PR) should follow our title convention. Learn more about the pull request title convention used in this repository.

openshift-ci[bot] commented 1 year ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: DharmitD

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/opendatahub-io/data-science-pipelines/blob/master/OWNERS)~~ [DharmitD] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

HumairAK commented 12 months ago

I think for first pass this is good, we can iterate on it as time goes on.

opendatahub-io / data-science-pipelines-tekton

feat: Adding a .snyk config #175