Skip to content

Conversation

@michael-valdron
Copy link
Member

Description of Changes

Summarize the changes you made as part of this pull request.

We use dependabot for security scans instead of snyk, automation activated outside our team, these changes should suppress snyk scanning in this repository.

Related Issue(s)

Link the GitHub/GitLab/JIRA issues that are related to this PR.

Acceptance Criteria

  • Unit Tests
  • E2E Tests
  • Documentation
    Update the sidebar if there is a new file added or an existing filename is changed

Tests Performed

Explain what tests you personally ran to ensure the changes are functioning as expected.

How To Test

Instructions for the reviewer on how to test your changes.

Notes To Reviewer

Any notes you would like to include for the reviewer.

Copy link
Contributor

@thepetk thepetk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@michael-valdron let's hold a bit, it didn't worked as expected in alizer. I'll take a second look and see if I have missed something on their docs

Copy link
Contributor

@thepetk thepetk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Took a second look in the docs and I feel we are using the correct format. We might need to wait a bit longer for the ignore command to be effective.

/lgtm

@openshift-ci
Copy link

openshift-ci bot commented Jan 16, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, thepetk

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:
  • OWNERS [michael-valdron,thepetk]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@thepetk
Copy link
Contributor

thepetk commented Jan 16, 2026

/retest

@michael-valdron
Copy link
Member Author

Took a second look in the docs and I feel we are using the correct format. We might need to wait a bit longer for the ignore command to be effective.

/lgtm

@thepetk Agreed, my main here is to suppress most of them opening for the main dependencies of devfile-web, can address anything else getting patched by snyk here in a follow up PR.

@michael-valdron michael-valdron merged commit 3b740d6 into devfile:main Jan 16, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants