diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/.snyk b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/.snyk
new file mode 100644
index 0000000000000..015ab6229e32f
--- /dev/null
+++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/.snyk
@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:minimatch:20160620':
+    - tape > glob > minimatch:
+        patched: '2024-10-24T14:43:45.644Z'
+        id: 'npm:minimatch:20160620'
+        path: tape > glob > minimatch
diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/package.json b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/package.json
index 326480cbe1911..23c4c645be44f 100644
--- a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/package.json
+++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/coveralls/node_modules/minimist/package.json
@@ -5,12 +5,14 @@
   "main": "index.js",
   "devDependencies": {
     "covert": "^1.0.0",
-    "tap": "~0.4.0",
+    "tap": "~18.0.0",
     "tape": "^3.5.0"
   },
   "scripts": {
     "test": "tap test/*.js",
-    "coverage": "covert test/*.js"
+    "coverage": "covert test/*.js",
+    "prepublish": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "testling": {
     "files": "test/*.js",
@@ -41,5 +43,9 @@
     "email": "mail@substack.net",
     "url": "http://substack.net"
   },
-  "license": "MIT"
+  "license": "MIT",
+  "snyk": true,
+  "dependencies": {
+    "@snyk/protect": "latest"
+  }
 }