diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..acf71cd --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - trailpack-sequelize > snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-04T21:27:45.302Z' + - trailpack-sequelize > snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-04T21:27:45.302Z' diff --git a/package.json b/package.json index 3b7ce01..2414f77 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,8 @@ "trailpack-sequelize": "^2.0.0", "trails": "v2-latest", "winston": "^2.3", - "wreck": "^10.0.0" + "wreck": "^10.0.0", + "snyk": "^1.231.0" }, "devDependencies": { "babel-preset-es2015": "^6.18.0", @@ -47,7 +48,9 @@ "supertest": "^1.2" }, "scripts": { - "test": "eslint . && mocha" + "test": "eslint . && mocha", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "engines": { "node": ">= 4.0.0" @@ -56,5 +59,6 @@ "extends": "trails" }, "repository": "git@github.com:Code4HR/hrtb.us.git", - "license": "MIT" + "license": "MIT", + "snyk": true }