Allow to exclude packages from the minimum package age

This commit is contained in:
Sander Declerck 2026-01-14 17:41:23 +01:00
parent 4ef4218eb5
commit d7a9884ff6
No known key found for this signature in database
9 changed files with 387 additions and 1 deletions

View file

@ -212,6 +212,22 @@ You can set the minimum package age through multiple sources (in order of priori
}
```
### Excluding Packages
Exclude trusted packages from minimum age filtering via environment variable or config file (both are merged):
```shell
export SAFE_CHAIN_NPM_MINIMUM_PACKAGE_AGE_EXCLUSIONS="react,@aikidosec/safe-chain"
```
```json
{
"npm": {
"minimumPackageAgeExclusions": ["react", "@aikidosec/safe-chain"]
}
}
```
## Custom Registries
Configure Safe Chain to scan packages from custom or private registries.