From 679e857537dcadb3c3f766b119f7a8a7649964ad Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 15:56:42 +0900 Subject: [PATCH 1/2] fix: functions/log/package.json & functions/log/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- functions/log/package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/functions/log/package.json b/functions/log/package.json index 7de86104fb..2f5df26922 100644 --- a/functions/log/package.json +++ b/functions/log/package.json @@ -12,11 +12,14 @@ "node": ">=8" }, "scripts": { - "test": "ava -T 20s --verbose test/*.test.js" + "test": "ava -T 20s --verbose test/*.test.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "@google-cloud/logging": "4.2.0", - "@google-cloud/monitoring": "0.6.0" + "@google-cloud/monitoring": "0.6.0", + "snyk": "^*" }, "devDependencies": { "@google-cloud/nodejs-repo-tools": "^3.0.0", @@ -27,5 +30,6 @@ "cloud-repo-tools": { "requiresKeyFile": true, "requiresProjectId": true - } + }, + "snyk": true } From 7cc20eb8c5763e84a9de1f342e2b9f64fba45753 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 15:56:43 +0900 Subject: [PATCH 2/2] fix: functions/log/package.json & functions/log/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- functions/log/.snyk | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 functions/log/.snyk diff --git a/functions/log/.snyk b/functions/log/.snyk new file mode 100644 index 0000000000..4ae297fa75 --- /dev/null +++ b/functions/log/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@google-cloud/monitoring > google-gax > lodash': + patched: '2020-05-01T06:55:02.178Z' + - '@google-cloud/logging > @google-cloud/common-grpc > @grpc/proto-loader > lodash': + patched: '2020-05-01T06:55:02.178Z' + - '@google-cloud/monitoring > google-gax > @grpc/proto-loader > lodash': + patched: '2020-05-01T06:55:02.178Z'