From 9866402d1f45a243cb803701661bdc5306ff589a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 27 May 2024 02:43:56 +0000 Subject: [PATCH] fix: test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/package.json & test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .../monorepo-with-nuget/src/paymentservice/.snyk | 10 ++++++++++ .../src/paymentservice/package.json | 10 +++++++--- 2 files changed, 17 insertions(+), 3 deletions(-) create mode 100644 test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/.snyk diff --git a/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/.snyk b/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/.snyk new file mode 100644 index 0000000000..74b3a2931e --- /dev/null +++ b/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@grpc/proto-loader > lodash': + patched: '2024-05-27T02:43:54.849Z' + id: SNYK-JS-LODASH-567746 + path: '@grpc/proto-loader > lodash' diff --git a/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/package.json b/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/package.json index 118b741029..fa042e00c4 100644 --- a/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/package.json +++ b/test/acceptance/workspaces/monorepo-with-nuget/src/paymentservice/package.json @@ -6,7 +6,9 @@ "main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1", - "lint": "semistandard *.js" + "lint": "semistandard *.js", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "author": "Jonathan Lui", "license": "ISC", @@ -18,9 +20,11 @@ "grpc": "^1.22.2", "pino": "^5.6.2", "simple-card-validator": "^1.1.0", - "uuid": "^3.2.1" + "uuid": "^3.2.1", + "@snyk/protect": "latest" }, "devDependencies": { "semistandard": "^12.0.1" - } + }, + "snyk": true }