diff --git a/.github/workflows/policy.yaml b/.github/workflows/policy.yaml index 891088325..2fb511f20 100644 --- a/.github/workflows/policy.yaml +++ b/.github/workflows/policy.yaml @@ -18,6 +18,7 @@ jobs: # 1. requirements-noble.txt can't build on jammy # 2. Ignore requirements files in spread tests, as some of these intentionally # contain vulnerable versions. - requirements-find-args: '! -name requirements-noble.txt ! -path "./tests/spread/*"' + # 3. How-tos contain requirements.txt files that don't specify versions. + requirements-find-args: '! -name requirements-noble.txt ! -path "./tests/spread/*" ! -path "./docs/howto/*"' osv-extra-args: '--config=source/osv-scanner.toml' uv-export: false