diff --git a/functions/imagemagick/.snyk b/functions/imagemagick/.snyk new file mode 100644 index 0000000000..8ebdda9707 --- /dev/null +++ b/functions/imagemagick/.snyk @@ -0,0 +1,32 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > teeny-request > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > @google-cloud/common > teeny-request > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > @google-cloud/common > google-auth-library > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > gcs-resumable-upload > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/vision > google-gax > google-auth-library > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > @google-cloud/common > google-auth-library > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > gcp-metadata > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/vision > google-gax > google-auth-library > gtoken > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > gtoken > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > @google-cloud/common > google-auth-library > gtoken > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' + - '@google-cloud/storage > @google-cloud/common > google-auth-library > gcp-metadata > gaxios > https-proxy-agent': + patched: '2019-10-03T23:42:49.802Z' diff --git a/functions/imagemagick/package.json b/functions/imagemagick/package.json index 962cbfb7e6..73bcb783c5 100644 --- a/functions/imagemagick/package.json +++ b/functions/imagemagick/package.json @@ -12,12 +12,15 @@ "node": ">=8" }, "scripts": { - "test": "ava -T 20s --verbose test/*.test.js" + "test": "ava -T 20s --verbose test/*.test.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "@google-cloud/storage": "^2.3.3", "@google-cloud/vision": "^0.24.0", - "gm": "^1.23.1" + "gm": "^1.23.1", + "snyk": "^1.230.5" }, "devDependencies": { "@google-cloud/nodejs-repo-tools": "^3.0.0", @@ -28,5 +31,6 @@ "cloud-repo-tools": { "requiresKeyFile": true, "requiresProjectId": true - } + }, + "snyk": true }