From 0e9b42a0af6b0f2330c351509e4185453ed51aac Mon Sep 17 00:00:00 2001 From: Bruno Oliveira da Silva Date: Mon, 6 May 2024 16:21:11 -0300 Subject: [PATCH] Update snyk ignore to display warnings from Netty Signed-off-by: Bruno Oliveira da Silva --- .github/snyk/.snyk | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/.github/snyk/.snyk b/.github/snyk/.snyk index a665816c2e..d4327350ba 100644 --- a/.github/snyk/.snyk +++ b/.github/snyk/.snyk @@ -15,19 +15,6 @@ ignore: The Keycloak services module is not affected by CVE-2021-3461 anymore, the issue was fixed on Keycloak 14.0.0 last year. More details: - https://issues.redhat.com/browse/KEYCLOAK-17495 - SNYK-JAVA-IONETTY-1042268: - - "*": - reason: > - There is no fixed version for io.netty:netty-handler. More details: - - https://github.com/netty/netty/issues/10806 - - https://github.com/netty/netty/issues/8537 - - https://github.com/netty/netty/issues/9930 - - https://github.com/netty/netty/issues/10362 - Netty Handler is a transitive dependency coming from Quarkus, - according to the Netty team, the fix should be available on Netty 5. - The expiry date was set as a reminder for us to upgrade, once they - provide the fix. - expires: 2024-06-31T00:00:00.000Z SNYK-JAVA-ORGKEYCLOAK-1658295: - "*": reason: >