Skip to content

Commit b56bd5c

Browse files
snyk-botadvayDev1
authored andcommitted
[Snyk] Fix for 1 vulnerabilities (#180)
* fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 * Update package.json
1 parent ebcf195 commit b56bd5c

File tree

2 files changed

+37
-3
lines changed

2 files changed

+37
-3
lines changed

.snyk

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-HTTPSPROXYAGENT-469131:
7+
- '@opencensus/exporter-stackdriver > google-auth-library > gtoken > gaxios > https-proxy-agent':
8+
patched: '2019-10-04T03:42:52.274Z'
9+
- puppeteer > https-proxy-agent:
10+
patched: '2019-10-04T03:42:52.274Z'
11+
- '@opencensus/exporter-stackdriver > googleapis > googleapis-common > gaxios > https-proxy-agent':
12+
patched: '2019-10-04T03:42:52.274Z'
13+
- '@opencensus/exporter-stackdriver > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
14+
patched: '2019-10-04T03:42:52.274Z'
15+
- '@opencensus/exporter-stackdriver > @opencensus/resource-util > gcp-metadata > gaxios > https-proxy-agent':
16+
patched: '2019-10-04T03:42:52.274Z'
17+
- '@opencensus/exporter-stackdriver > googleapis > google-auth-library > gaxios > https-proxy-agent':
18+
patched: '2019-10-04T03:42:52.274Z'
19+
- '@opencensus/exporter-stackdriver > google-auth-library > gaxios > https-proxy-agent':
20+
patched: '2019-10-04T03:42:52.274Z'
21+
- '@opencensus/exporter-stackdriver > googleapis > googleapis-common > google-auth-library > gaxios > https-proxy-agent':
22+
patched: '2019-10-04T03:42:52.274Z'
23+
- '@opencensus/exporter-stackdriver > googleapis > google-auth-library > gtoken > gaxios > https-proxy-agent':
24+
patched: '2019-10-04T03:42:52.274Z'
25+
- '@opencensus/exporter-stackdriver > googleapis > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
26+
patched: '2019-10-04T03:42:52.274Z'
27+
- '@opencensus/exporter-stackdriver > googleapis > googleapis-common > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
28+
patched: '2019-10-04T03:42:52.274Z'
29+
- '@opencensus/exporter-stackdriver > googleapis > googleapis-common > google-auth-library > gtoken > gaxios > https-proxy-agent':
30+
patched: '2019-10-04T03:42:52.274Z'

package.json

+7-3
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,9 @@
3636
"report-coverage": "nyc report --reporter=json && codecov -F unit -f coverage/coverage-final.json",
3737
"report-e2e-coverage": "nyc report --reporter=json && codecov -F e2e -f coverage/coverage-final.json",
3838
"lint": "eslint . --fix",
39-
"semantic-release": "semantic-release"
39+
"semantic-release": "semantic-release",
40+
"snyk-protect": "snyk protect",
41+
"prepublish": "yarn run snyk-protect"
4042
},
4143
"dependencies": {
4244
"@opencensus/core": "^0.0.18",
@@ -79,7 +81,8 @@
7981
"us-cities-db": "https://github.com/publicdocs-platform/us-cities-db",
8082
"winston": "^3.2.1",
8183
"xmldom": "^0.1.27",
82-
"yargs": "^14.2.0"
84+
"yargs": "^14.2.0",
85+
"snyk": "^1.230.5"
8386
},
8487
"devDependencies": {
8588
"@babel/cli": "^7.6.4",
@@ -138,5 +141,6 @@
138141
},
139142
"resolutions": {
140143
"all-the-cities": "https://github.com/publicdocs-platform/us-cities-db"
141-
}
144+
},
145+
"snyk": true
142146
}

0 commit comments

Comments
 (0)