Merge pull request #1487 from snyk/staging

RELEASE

Author: KatieArmstr

.circleci/config.yml

@@ -25,6 +25,7 @@ jobs:
             - prodsec/security_scans:
                 mode: auto
                 release-branch: master
+                open-source-additional-arguments: --exclude=test
     aks_integration_tests:
         docker:
             - image: cimg/node:18.19.1
@@ -326,18 +327,6 @@ jobs:
                     echo "export IMAGE_NAME_APPROVED_UBI9=${IMAGE_NAME_APPROVED_UBI9}" >> $BASH_ENV
                     echo "export IMAGE_NAME_PUBLISHED_UBI9=${IMAGE_NAME_PUBLISHED_UBI9}" >> $BASH_ENV
                 name: Export environment variables
-            - snyk/scan:
-                additional-arguments: --all-projects --exclude=test
-                fail-on-issues: true
-                monitor-on-build: true
-                severity-threshold: high
-                token-variable: SNYK_TOKEN
-            - snyk/scan:
-                command: code test
-                fail-on-issues: true
-                monitor-on-build: true
-                severity-threshold: high
-                token-variable: SNYK_TOKEN
             - snyk/scan:
                 additional-arguments: --project-name=alpine --policy-path=.snyk
                 command: container test
@@ -432,18 +421,6 @@ jobs:
             - run:
                 command: npm ci
             - install_python_requests
-            - snyk/scan:
-                additional-arguments: --all-projects --exclude=test
-                fail-on-issues: true
-                monitor-on-build: false
-                severity-threshold: high
-                token-variable: SNYK_TOKEN
-            - snyk/scan:
-                command: code test
-                fail-on-issues: true
-                monitor-on-build: false
-                severity-threshold: high
-                token-variable: SNYK_TOKEN
             - run:
                 command: |
                     npm run build &&

.snyk

@@ -1,10 +1,5 @@
 # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
 version: v1.25.0
 # ignores vulnerabilities until expiry date; change duration by modifying expiry date
-ignore:
-  SNYK-JS-INFLIGHT-6095116:
-      - '*':
-        reason: Needs some work to remove the dependency and need to release a fix. The ignore window is short.
-        expires: 2023-12-02T14:33:00.260Z
-        created: 2023-12-01T14:33:00.260Z
+ignore: {}
 patch: {}

Dockerfile

@@ -34,7 +34,7 @@ RUN adduser -S -G snyk -h /srv/app -u 10001 snyk
 
 # Install gcloud
 RUN curl -sL https://sdk.cloud.google.com > /install.sh
-RUN bash /install.sh --disable-prompts --install-dir=/ && rm /google-cloud-sdk/bin/anthoscli && rm -rf /google-cloud-sdk/platform
+RUN bash /install.sh --disable-prompts --install-dir=/ && rm -rf /google-cloud-sdk/platform
 ENV PATH=/google-cloud-sdk/bin:$PATH
 RUN rm /install.sh
 RUN apk del curl bash

package-lock.json

@@ -37,7 +37,7 @@
     "@kubernetes/client-node": "^0.20.0",
     "@snyk/dep-graph": "^2.8.1",
     "async": "^3.2.5",
-    "aws-sdk": "^2.1602.0",
+    "aws-sdk": "^2.1616.0",
     "bunyan": "^1.8.15",
     "child-process-promise": "^2.2.1",
     "fastq": "^1.17.1",
@@ -47,11 +47,11 @@
     "packageurl-js": "^1.2.1",
     "sleep-promise": "^9.1.0",
     "snyk-config": "5.3.0",
-    "snyk-docker-plugin": "6.10.3",
+    "snyk-docker-plugin": "6.11.0",
     "source-map-support": "^0.5.21",
     "tunnel": "0.0.6",
-    "typescript": "4.7.4",
-    "yaml": "^2.4.1"
+    "typescript": "4.9.5",
+    "yaml": "^2.4.2"
   },
   "devDependencies": {
     "@commitlint/cli": "^17.8.1",
@@ -61,7 +61,7 @@
     "@types/jest": "^26.0.24",
     "@types/lru-cache": "^5.1.1",
     "@types/needle": "^2.5.3",
-    "@types/node": "^16.18.96",
+    "@types/node": "^16.18.97",
     "@types/source-map-support": "^0.5.10",
     "@types/tunnel": "0.0.2",
     "@typescript-eslint/eslint-plugin": "^4.33.0",