diff --git a/.snyk b/.snyk index ad46b76..86eb50b 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,10 @@ -version: v1.5.2 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 ignore: {} -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-05-02T23:22:26.506Z' + - sequelize > lodash: + patched: '2020-05-02T23:22:26.506Z' diff --git a/package.json b/package.json index 4185a8c..d0e89cc 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,8 @@ "joi": "^12.0.0", "lodash": "^4.17.5", "trailpack": "^3", - "sequelize": "^4.37.1" + "sequelize": "^4.37.1", + "snyk": "^1.316.2" }, "devDependencies": { "eslint": "^4.19.0", @@ -47,7 +48,9 @@ "trails": "3.x" }, "scripts": { - "test": "eslint --fix . && mocha" + "test": "eslint --fix . && mocha", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "engines": { "node": ">= 7.0.0" @@ -55,5 +58,6 @@ "eslintConfig": { "extends": "trails" }, - "repository": "https://github.com/jaumard/trailpack-sequelize" + "repository": "https://github.com/jaumard/trailpack-sequelize", + "snyk": true }