Skip to content

Commit

Permalink
fix: play-with-docker/Portus/package.json, play-with-docker/Portus/ya…
Browse files Browse the repository at this point in the history
…rn.lock & play-with-docker/Portus/.snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
  • Loading branch information
snyk-bot committed Jul 21, 2024
1 parent 86abcc8 commit 69bcd50
Show file tree
Hide file tree
Showing 3 changed files with 22 additions and 3 deletions.
10 changes: 10 additions & 0 deletions play-with-docker/Portus/.snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.25.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-567746:
- webpack > async > lodash:
patched: '2024-07-21T02:59:34.184Z'
id: SNYK-JS-LODASH-567746
path: webpack > async > lodash
10 changes: 7 additions & 3 deletions play-with-docker/Portus/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,9 @@
"private": true,
"scripts": {
"eslint": "eslint --max-warnings 0 --ext .js .",
"webpack": "webpack --watch --config config/webpack.js"
"webpack": "webpack --watch --config config/webpack.js",
"prepare": "yarn run snyk-protect",
"snyk-protect": "snyk-protect"
},
"devDependencies": {
"babel-core": "^6.23.0",
Expand All @@ -20,11 +22,13 @@
"jquery": "^2.2.1",
"jquery-ujs": "^1.2.1",
"stats-webpack-plugin": "^0.4.3",
"webpack": "^2.2.1"
"webpack": "^2.2.1",
"@snyk/protect": "latest"
},
"babel": {
"presets": [
"es2015"
]
}
},
"snyk": true
}
5 changes: 5 additions & 0 deletions play-with-docker/Portus/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,11 @@
# yarn lockfile v1


"@snyk/protect@^1.1292.1":
version "1.1292.1"
resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.1292.1.tgz#fe67905a5681828ac315b03e366427405e762157"
integrity sha512-wM/0JGs1PhN30nigmOSfEPge3pyEHBAEN3/5/EoyIPOsUsZl/pKBEb2TwZnYbnfTKQi7CpyOKkVIaw40CBbQVA==

abbrev@1:
version "1.1.0"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.0.tgz#d0554c2256636e2f56e7c2e5ad183f859428d81f"
Expand Down

0 comments on commit 69bcd50

Please sign in to comment.