Merge pull request #59 from willroberts/snyk

Adds Snyk script and config

.snyk

@@ -0,0 +1,25 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JS-HANDLEBARS-1056767:
+    - '*':
+        reason: We do not render user-provided templates
+        expires: 2032-12-31T23:59:59.999Z
+        created: 2022-09-27T02:49:02.789Z
+  'npm:extend:20180424':
+    - '*':
+        reason: We do not expose extend in our libraries
+        expires: 2032-12-31T23:59:59.999Z
+        created: 2022-09-27T02:50:48.546Z
+  SNYK-JS-PUG-1071616:
+    - '*':
+        reason: No newer version of Kue is available
+        expires: 2032-12-31T23:59:59.999Z
+        created: 2022-09-27T02:53:57.988Z
+  SNYK-JS-ANSIREGEX-1583908:
+    - '*':
+        reason: No newer version of Kue is available
+        expires: 2032-12-31T23:59:59.999Z
+        created: 2022-09-27T02:54:20.668Z
+patch: {}

package.json

@@ -221,6 +221,7 @@
     "push:staging": "gulp git:staging",
     "rsx:copy": "gulp rsx:copy",
     "rsx:copy:web": "gulp rsx:copy:web",
+    "snyk": "snyk test --show-vulnerable-paths=all --severity-threshold=high",
     "test": "mocha -t 1000 --recursive test",
     "test:integration": "mocha -t 1000 --recursive test/integration",
     "test:integration:achievements": "mocha -t 1000 test/integration/achievements",

test/unit/sdk/cards/monthlies/seven_sisters.js

@@ -281,6 +281,7 @@ describe('special events', () => {
         SDK.GameSession.reset();
       }
     });
+    /* Test disabled: inconsistently slow
     it('expect neutral sister to add 2 random abyssian cards to your hand when summoned', () => {
       for (let i = 0; i < 100; i++) {
         const player1Deck = [
@@ -314,6 +315,7 @@ describe('special events', () => {
         SDK.GameSession.reset();
       }
     });
+    */
 
     /* Test disabled: slow
     it('expect neutral sister to add 2 random magmar cards to your hand when summoned', function() {