custom dependency review config

getsentry · Oct 17, 2024 · 1a21354 · 1a21354
1 parent d741d66
commit 1a21354
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/dependency-review-config.yml b/.github/dependency-review-config.yml
@@ -0,0 +1,7 @@
+fail-on-severity: 'high'
+allow-ghsas:
+  # dependency review does not allow specific file exclusions
+  # we use an older version of NextJS in our tests and thus need to 
+  # exclude this
+  # once our minimum supported version is over 14.1.1 this can be removed
+  - GHSA-fr5h-rqp8-mj6g