From f8db27954db2a2f80cd019c3f2084ac9a19c4958 Mon Sep 17 00:00:00 2001
From: Jason O'Neal <jason.allen.oneal@gmail.com>
Date: Sun, 30 Aug 2026 19:37:58 -0400
Subject: [PATCH] chore: document DiskCache OSV exception

---
 osv-scanner.toml | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 osv-scanner.toml

diff --git a/osv-scanner.toml b/osv-scanner.toml
new file mode 100644
index 0000000..035c5df
--- /dev/null
+++ b/osv-scanner.toml
@@ -0,0 +1,4 @@
+[[IgnoredVulns]]
+id = "PYSEC-2026-2447"
+ignoreUntil = 2026-10-31
+reason = "DiskCache is reachable only through the optional embed extra; it is absent from the default dependency set and runtime image, and SignalGate does not enable the vulnerable cache path. Tracked in issue #15."