Skip to content

Commit

Permalink
chore: update .snyk file to ignore cryptiles
Browse files Browse the repository at this point in the history
There's a new vulnerability reported in the outdated @google-cloud/storage@1.1.1
which is introduced by a dependency on reaction-file-collections' dependency tus-node-server.
I'm adding an ignore as there's a PR that has been accepted to resolve this dependency vulnerability.
Additionally, Reaction Commerce does not execute the code that has the vulnerability in this case.
  • Loading branch information
spencern committed Jul 20, 2018
1 parent c959219 commit b048528
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions .snyk
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,13 @@ ignore:
expires: '2018-08-26T20:23:03.274Z'
'npm:hoek:20180212':
- '*':
reason: "No direct dependency upgrade available. Issue filed here: https://github.com/tus/tus-node-server/issues/119"
reason: "PR Accepted to tus-node-server which will resolve this vulnerability https://github.com/tus/tus-node-server/pull/120"
expires: '2018-08-26T20:23:03.274Z'
'npm:tunnel-agent:20170305':
- '*':
reason: "No direct dependency upgrade available. Issue filed here: https://github.com/tus/tus-node-server/issues/119"
reason: "PR Accepted to tus-node-server which will resolve this vulnerability https://github.com/tus/tus-node-server/pull/120"
expires: '2018-08-26T20:23:03.274Z'
'npm:cryptiles:20180710':
- '*':
reason: "PR Accepted to tus-node-server which will resolve this vulnerability https://github.com/tus/tus-node-server/pull/120"
expires: '2018-08-26T20:23:03.274Z'

0 comments on commit b048528

Please sign in to comment.