From 325956aeccbad5df2af63c403832ca95185b5f83 Mon Sep 17 00:00:00 2001 From: Geoff Hutchison Date: Tue, 19 May 2026 11:30:14 -0400 Subject: [PATCH] Add a default safety policy file to avoid lint_python fails Signed-off-by: Geoff Hutchison --- .safety-policy.yml | 54 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 .safety-policy.yml diff --git a/.safety-policy.yml b/.safety-policy.yml new file mode 100644 index 000000000..57f1f144d --- /dev/null +++ b/.safety-policy.yml @@ -0,0 +1,54 @@ +version: '3.0' + +scanning-settings: + max-depth: 6 + exclude: [] + include-files: [] + system: + targets: [] + + +report: + dependency-vulnerabilities: + enabled: true + auto-ignore-in-report: + python: + environment-results: true + unpinned-requirements: true + cvss-severity: [] + + +fail-scan-with-exit-code: + dependency-vulnerabilities: + enabled: true + fail-on-any-of: + cvss-severity: + - high + - medium + - critical + exploitability: + - high + - medium + - critical + +security-updates: + dependency-vulnerabilities: + auto-security-updates-limit: + - patch + +installation: + default-action: allow + audit-logging: + enabled: true + allow: + packages: [] + vulnerabilities: {} + deny: + packages: {} + vulnerabilities: + warning-on-any-of: + cvss-severity: [] + block-on-any-of: + cvss-severity: [] + +