From 5aa2477c2d4f8e1c9d3d2087edde59ca15427330 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 01:23:40 +0300 Subject: [PATCH 1/2] fix: functions/package.json & functions/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- functions/package.json | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/functions/package.json b/functions/package.json index 25a35b2..5470211 100644 --- a/functions/package.json +++ b/functions/package.json @@ -6,7 +6,13 @@ "@google-cloud/storage": "^0.7.0", "firebase-functions": "^0.5", "mkdirp-promise": "^5.0.1", - "sharp": "^0.17.2" + "sharp": "^0.17.2", + "snyk": "^1.316.1" }, - "private": true + "private": true, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true } From eb9431741c9aa195a4c1217db60cc80f343aa318 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 01:23:41 +0300 Subject: [PATCH 2/2] fix: functions/package.json & functions/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- functions/.snyk | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 functions/.snyk diff --git a/functions/.snyk b/functions/.snyk new file mode 100644 index 0000000..52a66cf --- /dev/null +++ b/functions/.snyk @@ -0,0 +1,18 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@google-cloud/debug-agent > lodash': + patched: '2020-04-30T22:23:36.489Z' + - firebase-functions > lodash: + patched: '2020-04-30T22:23:36.489Z' + - '@google-cloud/storage > async > lodash': + patched: '2020-04-30T22:23:36.489Z' + - '@google-cloud/storage > @google-cloud/common > google-auto-auth > async > lodash': + patched: '2020-04-30T22:23:36.489Z' + - '@google-cloud/storage > @google-cloud/common > split-array-stream > async > lodash': + patched: '2020-04-30T22:23:36.489Z' + - '@google-cloud/storage > gcs-resumable-upload > google-auto-auth > async > lodash': + patched: '2020-04-30T22:23:36.489Z'