From abc3ad551b2874838b6e85981edb65499f105c45 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 24 Sep 2022 16:23:12 +0000 Subject: [PATCH] fix: test/acceptance/workspaces/npm-package-with-git-url/package.json & test/acceptance/workspaces/npm-package-with-git-url/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:qs:20170213 --- test/acceptance/workspaces/npm-package-with-git-url/.snyk | 4 +++- .../workspaces/npm-package-with-git-url/package.json | 8 ++++++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/test/acceptance/workspaces/npm-package-with-git-url/.snyk b/test/acceptance/workspaces/npm-package-with-git-url/.snyk index 487b2861e2..ef2b87a026 100644 --- a/test/acceptance/workspaces/npm-package-with-git-url/.snyk +++ b/test/acceptance/workspaces/npm-package-with-git-url/.snyk @@ -1,8 +1,10 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.14.1 +version: v1.25.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:qs:20170213': - npm-package-with-git-url > qs: patched: '2018-11-04T12:47:13.696Z' + - patchable-vuln > qs: + patched: '2022-09-24T16:23:10.116Z' diff --git a/test/acceptance/workspaces/npm-package-with-git-url/package.json b/test/acceptance/workspaces/npm-package-with-git-url/package.json index 6ed02bf9a3..716bfa94fd 100644 --- a/test/acceptance/workspaces/npm-package-with-git-url/package.json +++ b/test/acceptance/workspaces/npm-package-with-git-url/package.json @@ -3,9 +3,13 @@ "version": "1.0.0", "description": "", "main": "index.js", - "scripts": {}, + "scripts": { + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, "dependencies": { - "patchable-vuln": "git+ssh://git@github.com/snyk-fixtures/patchable-vuln.git" + "patchable-vuln": "git+ssh://git@github.com/snyk-fixtures/patchable-vuln.git", + "@snyk/protect": "latest" }, "keywords": [], "author": "",