当提供绝对文件路径时，Snyk无法忽略漏洞。

Question

项目根目录: C:\src\repos\test\abc

例如，这就是我试图忽略的Snyk issueId。命令运行良好，并在项目根目录中创建.snyk YAML文件。

C:\src\repos\test\abc> snyk ignore --id="SNYK-PYTHON-RSA-570831"

然后，我对提供相对路径的requirements.txt文件执行snyk测试，然后检查结果1.json确实确认它成功地忽略了这个粒子issueID

C:\src\repos\test\abc> snyk test --file='requirements.txt' --severity-threshold="medium" --skip-unresolved --json > results1.json

  "filtered": {
    "ignore": [
      {
        "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
        "alternativeIds": [],
        "creationTime": "2020-06-02T13:50:22.620471Z",
        "credit": [
          "Unknown"
        ],
        "cvssScore": 5.6,
        "description": "## Overview\n[rsa](https://pypi.org/project/rsa/) is a pure-Python RSA implementation.\n\nAffected versions of this package are vulnerable to Access Restriction Bypass. It does not detect `ciphertext` modification during decryption (prepended \"0\" bytes) in `PKCS1_v1_5`.\n## Remediation\nUpgrade `rsa` to version 4.1 or higher.\n## References\n- [GitHub Commit](https://github.com/sybrenstuvel/python-rsa/commit/93af6f2f89a9bf28361e67716c4240e691520f30)\n- [GitHub Issue](https://github.com/sybrenstuvel/python-rsa/issues/146)\n",
        "disclosureTime": "2020-06-02T13:45:26Z",
        "exploit": "Not Defined",
        "fixedIn": [
          "4.1"
        ],
        "functions": [],
        "functions_new": [],
        "id": "SNYK-PYTHON-RSA-570831",

但是，当我提供文件的绝对路径，并且.snyk文件仍然存在于项目根目录中时，snyk命令确实运行良好，但在检查结果2.json时，它无法忽略该问题，并将其列为漏洞。

C:\src\repos\test\abc> snyk test --file='C:\\src\\repos\\test\\abc\\requirements.txt' --severity-threshold="medium" --skip-unresolved --json > results2.json

 "filesystemPolicy": false,
  "filtered": {
    "ignore": [],
    "patch": []
  },

有人能解释一下为什么这不适用于特定的案子吗？

我需要snyk忽略为绝对文件路径工作，因为这是一个问题的要求。

Answer 1

使用标志当snyk测试指定忽略策略文件工作。例如--策略-path=/path/path/file