From c1c036a02dbbccc6a565f6253470c7f3ed7ef756 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 5 Oct 2019 07:49:06 +0000 Subject: [PATCH] fix: test/fixtures/qs-package/package.json & test/fixtures/qs-package/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- test/fixtures/qs-package/.snyk | 11 ++++++++++- test/fixtures/qs-package/package.json | 10 +++++++--- 2 files changed, 17 insertions(+), 4 deletions(-) diff --git a/test/fixtures/qs-package/.snyk b/test/fixtures/qs-package/.snyk index c126332f30..4c481113e4 100644 --- a/test/fixtures/qs-package/.snyk +++ b/test/fixtures/qs-package/.snyk @@ -1 +1,10 @@ -version: v1 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - '@remy/protect-test > snyk > proxy-agent > https-proxy-agent': + patched: '2019-10-05T07:49:04.771Z' + - '@remy/protect-test > snyk > proxy-agent > pac-proxy-agent > https-proxy-agent': + patched: '2019-10-05T07:49:04.771Z' diff --git a/test/fixtures/qs-package/package.json b/test/fixtures/qs-package/package.json index f5236de6f3..b24aefae05 100644 --- a/test/fixtures/qs-package/package.json +++ b/test/fixtures/qs-package/package.json @@ -5,12 +5,16 @@ "main": "index.js", "dependencies": { "@remy/protect-test": "^1.0.7", - "qs": "^0.6.6" + "qs": "^0.6.6", + "snyk": "^1.231.0" }, "devDependencies": {}, "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "author": "", - "license": "ISC" + "license": "ISC", + "snyk": true }