diff --git a/docs/.snyk b/docs/.snyk new file mode 100644 index 000000000000..e49a36dbbfd2 --- /dev/null +++ b/docs/.snyk @@ -0,0 +1,30 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > lodash: + patched: '2023-11-18T23:58:57.117Z' + id: SNYK-JS-LODASH-567746 + path: >- + gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > + remark-mdxjs > @babel/core > lodash + - docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > lodash: + patched: '2023-11-18T23:58:57.117Z' + id: SNYK-JS-LODASH-567746 + path: >- + docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > + @babel/core > lodash + - gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > @babel/helper-module-transforms > lodash: + patched: '2023-11-18T23:58:57.117Z' + id: SNYK-JS-LODASH-567746 + path: >- + gatsby-theme-docz > gatsby > gatsby-cli > gatsby-recipes > + remark-mdxjs > @babel/core > @babel/helper-module-transforms > lodash + - docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > @babel/core > @babel/helper-module-transforms > lodash: + patched: '2023-11-18T23:58:57.117Z' + id: SNYK-JS-LODASH-567746 + path: >- + docz > gatsby > gatsby-cli > gatsby-recipes > remark-mdxjs > + @babel/core > @babel/helper-module-transforms > lodash diff --git a/docs/package-lock.json b/docs/package-lock.json index 411f0894056d..c7bead17a01c 100644 --- a/docs/package-lock.json +++ b/docs/package-lock.json @@ -2691,6 +2691,11 @@ } } }, + "@snyk/protect": { + "version": "1.1248.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1248.0.tgz", + "integrity": "sha512-t1dBU/2eliumDPjsjzJPpdpkCL+FpV+4Nz5Qes8aJqv/QwRPlS9F51hNm4EQjuahUM01eC35m7oNuBglp/Yp7Q==" + }, "@styled-system/background": { "version": "5.1.2", "resolved": "https://registry.npmjs.org/@styled-system/background/-/background-5.1.2.tgz", diff --git a/docs/package.json b/docs/package.json index 87f5f3fc6b0d..1d99ef03d5d9 100644 --- a/docs/package.json +++ b/docs/package.json @@ -39,7 +39,8 @@ "react-helmet": "^6.1.0", "swagger-ui-react": "^3.36.2", "theme-ui": "^0.3.1", - "three": "^0.68.0" + "three": "^0.68.0", + "@snyk/protect": "latest" }, "devDependencies": { "eslint-config-airbnb": "^18.2.1", @@ -61,7 +62,9 @@ "clean": "gatsby clean", "lint": "eslint src/ --ext .ts,.js,.tsx,.jsx", "lint-fix": "eslint --fix src/ --ext .ts,.js,.tsx,.jsx", - "test": "echo \"Write tests! -> https://gatsby.dev/unit-testing\" && exit 1" + "test": "echo \"Write tests! -> https://gatsby.dev/unit-testing\" && exit 1", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -75,5 +78,6 @@ }, "bugs": { "url": "https://github.com/gatsbyjs/gatsby/issues" - } + }, + "snyk": true }