Skip to content

Commit

Permalink
fix: package.json & .snyk to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:hawk:20160119
- https://snyk.io/vuln/npm:request:20160119

Latest report for garden-io/garden:
https://snyk.io/test/github/garden-io/garden
  • Loading branch information
snyk-bot authored and edvald committed Feb 13, 2018
1 parent befc148 commit 0766b56
Show file tree
Hide file tree
Showing 2 changed files with 18 additions and 3 deletions.
11 changes: 11 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.10.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:hawk:20160119':
- '@google-cloud/functions-emulator > @google-cloud/storage > @google-cloud/common > log-driver > codecov.io > request > hawk':
patched: '2018-02-10T05:34:44.064Z'
'npm:request:20160119':
- '@google-cloud/functions-emulator > @google-cloud/storage > @google-cloud/common > log-driver > codecov.io > request':
patched: '2018-02-10T05:34:44.064Z'
10 changes: 7 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,8 @@
"runtypes": "^0.13.1",
"serverless": "^1.25.0",
"typescript-memoize": "^1.0.0-alpha.3",
"winston": "^2.4.0"
"winston": "^2.4.0",
"snyk": "^1.69.7"
},
"devDependencies": {
"@types/bluebird": "^3.5.18",
Expand Down Expand Up @@ -68,6 +69,9 @@
"lint": "node_modules/.bin/tslint -p . && node_modules/.bin/tsfmt --verify",
"posttest": "npm run lint",
"test": "node_modules/.bin/mocha test/**/*.ts test/**/**/*.ts",
"watch": "node_modules/.bin/tsc -w -p ."
}
"watch": "node_modules/.bin/tsc -w -p .",
"snyk-protect": "snyk protect",
"prepare": "npm run snyk-protect"
},
"snyk": true
}

0 comments on commit 0766b56

Please sign in to comment.