Merge pull request #3 from hypertrace/add-snyk-ignore

Ignore Snyk error since there's no available replacement

Author: tim-mwangi

.circleci/config.yml

@@ -89,7 +89,7 @@ jobs:
     steps:
       - setup_build_environment
       - snyk/scan:
-          additional-arguments: --all-sub-projects
+          additional-arguments: --all-sub-projects --policy-path=.snyk
 
 workflows:
   version: 2

.snyk

@@ -0,0 +1,9 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JAVA-IOGRPC-571957:
+    - '*':
+        reason: No replacement available
+        expires: 2020-08-31T00:00:00.000Z
+patch: {}