You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# This file must be located at the root of the repository
3
+
4
+
# Checks exemptions
5
+
exemptions:
6
+
- check: dependency_update_tool
7
+
reason: "Helm deps are not currently scanned. Maintainers are watching developments to dependabot-core #2237"# Justification of this exemption (mandatory, it will be displayed on the UI)
8
+
- check: sbom
9
+
reason: "Tracking Helm dependencies is not yet a stable practice."
10
+
- check: self_assessment
11
+
reason: "Refer to self assessments supplied by the codebases Argo Helm supports."
12
+
- check: signed_releases
13
+
reason: "Argo Helm releases are made via Artifact Hub, where they are signed. The unsigned GitHub releases are for reference only."
14
+
- check: license_scanning
15
+
reason: "Temporary exemption: pending response from CNCF Service Desk"
16
+
17
+
# TODO:
18
+
# License scanning information
19
+
# licenseScanning:
20
+
# URL with the repository's license scanning results
21
+
#
22
+
# CLOMonitor can extract license scanning results from FOSSA and Snyk badges
23
+
# in the repository README.md file automatically. If your repository uses a
24
+
# different scanning solution, this url can be set to pass the corresponding
0 commit comments