diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..b54bb14 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-redux > lodash: + patched: '2020-05-01T06:51:06.735Z' + - redux > lodash: + patched: '2020-05-01T06:51:06.735Z' diff --git a/package.json b/package.json index 7b60adc..ff75539 100644 --- a/package.json +++ b/package.json @@ -37,7 +37,9 @@ "prettier": "find . -name \"*.js\" | grep -v -f .eslintignore | xargs prettier --single-quote --print-width=100 --jsx-bracket-same-line=true --trailing-comma=all --write ", "start": "NODE_ENV=production node server/index.js", "test": "NODE_ENV=test jest", - "test:ci": "NODE_ENV=test ./node_modules/.bin/jest" + "test:ci": "NODE_ENV=test ./node_modules/.bin/jest", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "lint-staged": { "*.js": [ @@ -68,7 +70,8 @@ "source-map-support": "^0.5.0", "styled-components": "^2.2.1", "uuid": "^3.1.0", - "webpack-flush-chunks": "^1.2.0" + "webpack-flush-chunks": "^1.2.0", + "snyk": "^1.316.1" }, "devDependencies": { "autodll-webpack-plugin": "^0.3.1", @@ -144,5 +147,6 @@ "commitizen": { "path": "./node_modules/cz-gitmoji" } - } + }, + "snyk": true }