diff --git a/.snyk b/.snyk index 892f59a..2b8e30e 100644 --- a/.snyk +++ b/.snyk @@ -1,4 +1,8 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.2 +version: v1.12.0 ignore: {} -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:tunnel-agent:20170305': + - '@angular/cli > node-sass > request > tunnel-agent': + patched: '2018-06-25T22:14:51.197Z' diff --git a/package.json b/package.json index 7a679ad..6a99692 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,9 @@ "test": "ng test", "lint": "ng lint", "e2e": "ng e2e", - "postinstall": "ng build --prod" + "postinstall": "ng build --prod", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "private": true, "dependencies": { @@ -49,7 +51,8 @@ "typescript": "~2.5.3", "winston": "^2.4.1", "winston-papertrail": "^1.0.5", - "zone.js": "^0.8.19" + "zone.js": "^0.8.19", + "snyk": "^1.85.0" }, "devDependencies": { "@angular/language-service": "^5.2.0", @@ -70,5 +73,6 @@ "protractor": "~5.1.2", "ts-node": "~4.1.0", "tslint": "~5.9.1" - } + }, + "snyk": true }