From b67e83d6ee2430d49772d9648e6f12ce4cf12c5c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 13:23:29 +0900 Subject: [PATCH 1/2] fix: iot/manager/package.json & iot/manager/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- iot/manager/package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/iot/manager/package.json b/iot/manager/package.json index 480528d42f..3f30148355 100644 --- a/iot/manager/package.json +++ b/iot/manager/package.json @@ -13,12 +13,15 @@ "node": ">=8.0.0" }, "scripts": { - "test": "repo-tools test run --cmd ava -- -T 3m --verbose system-test/*.test.js" + "test": "repo-tools test run --cmd ava -- -T 3m --verbose system-test/*.test.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "@google-cloud/pubsub": "0.22.2", "googleapis": "^36.0.0", - "yargs": "12.0.5" + "yargs": "12.0.5", + "snyk": "^1.316.1" }, "devDependencies": { "@google-cloud/nodejs-repo-tools": "^3.0.0", @@ -35,5 +38,6 @@ ] } } - } + }, + "snyk": true } From 1c84f000163817144a6ecef09e12ca2019581fd8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 13:23:30 +0900 Subject: [PATCH 2/2] fix: iot/manager/package.json & iot/manager/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- iot/manager/.snyk | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 iot/manager/.snyk diff --git a/iot/manager/.snyk b/iot/manager/.snyk new file mode 100644 index 0000000000..992c98e8b2 --- /dev/null +++ b/iot/manager/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@google-cloud/pubsub > google-gax > @grpc/proto-loader > lodash': + patched: '2020-05-01T04:22:52.264Z'