python-zhmcclient/.safety-policy-install.yml at master · zhmcclient/python-zhmcclient · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
# Safety policy file for packages needed for installation.
# For documentation, see https://docs.pyup.io/docs/safety-20-policy-file

# Note: This policy file is used against the versions in minimum-constraints-install.txt.

# Configuration for the 'safety check' command
security:

    # Ignore certain severities.
    # A number between 0 and 10, with the following significant values:
    # - 9: ignore all vulnerabilities except CRITICAL severity
    # - 7: ignore all vulnerabilities except CRITICAL & HIGH severity
    # - 4: ignore all vulnerabilities except CRITICAL, HIGH & MEDIUM severity
    ignore-cvss-severity-below: 0

    # Ignore unknown severities.
    # Should be set to False.
    ignore-cvss-unknown-severity: False

    # Ignore unpinned requirements.
    # Default is true. "Unpinned" in this case means anything else but "==".
    # Since we are checking against the minimum-constraints file, this check
    # is enabled (false).
    ignore-unpinned-requirements: False

    # List of specific vulnerabilities to ignore.
    # {id}:                 # vulnerability ID
    #     reason: {text}    # optional: Reason for ignoring it. Will be reported in the Safety reports
    #     expires: {date}   # optional: Date when this ignore will expire
    ignore-vulnerabilities:
        90553:
            reason: Fixed requests version 2.33.0 is not installable in the Python 3.9 CI environment, so Python 3.9 uses requests 2.32.4
        96886:
            reason: Fixed urllib3 version 2.7.0 requires Python>=3.10 and is used there
        SFTY-20260122-20373:
            reason: Fixed pytest version 9.0.3 requires Python>=3.10 and is used there
        SFTY-20260511-47957:
            reason: Fixed urllib3 version 2.7.0 requires Python>=3.10 and is used there
        SFTY-20260420-60812:
            reason: Fixed pip version 26.1 requires Python>=3.10 and is used there
        SFTY-20260427-69629:
            reason: Fixed pip version 26.1 requires Python>=3.10 and is used there

    # Continue with exit code 0 when vulnerabilities are found.
    continue-on-vulnerability-error: False