Skip to content

Commit 8cd6d40

Browse files
authored
fix: allow known unpatched lodash advisory in dependency review
1 parent 1b82054 commit 8cd6d40

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

.github/dependency-review-config.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,3 +12,8 @@ comment-summary-in-pr: always
1212
fail-on-scopes:
1313
- runtime
1414
- unknown
15+
16+
# GHSA-r5fr-rjxr-66jc currently has no patched lodash release.
17+
# This is only introduced transitively via @primer/react -> styled-components.
18+
allow-ghsas:
19+
- GHSA-r5fr-rjxr-66jc

0 commit comments

Comments
 (0)