fix: plugins/google-cloud/package.json & plugins/google-cloud/.snyk t…

…o reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131
verdaccio · Oct 4, 2019 · 5eb3717 · 5eb3717
1 parent caf4f89
commit 5eb3717
Show file tree

Hide file tree

Showing 2 changed files with 43 additions and 3 deletions.
diff --git a/plugins/google-cloud/.snyk b/plugins/google-cloud/.snyk
@@ -0,0 +1,36 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-HTTPSPROXYAGENT-469131:
+    - '@google-cloud/storage > @google-cloud/common > google-auth-library > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/datastore > google-auth-library > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > gcs-resumable-upload > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/datastore > google-auth-library > gtoken > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/datastore > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/datastore > google-gax > google-auth-library > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > @google-cloud/common > teeny-request > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/datastore > google-gax > google-auth-library > gtoken > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/datastore > google-gax > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > @google-cloud/common > google-auth-library > gtoken > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > @google-cloud/common > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > gcp-metadata > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
+    - '@google-cloud/storage > gcs-resumable-upload > google-auth-library > gtoken > gaxios > https-proxy-agent':
+        patched: '2019-10-04T05:12:08.723Z'
diff --git a/plugins/google-cloud/package.json b/plugins/google-cloud/package.json
@@ -32,7 +32,8 @@
     "@google-cloud/datastore": "4.3.0",
     "@google-cloud/storage": "3.2.1",
     "@verdaccio/commons-api": "^8.1.2",
-    "@verdaccio/streams": "^8.1.2"
+    "@verdaccio/streams": "^8.1.2",
+    "snyk": "^1.230.5"
   },
   "devDependencies": {
     "@verdaccio/babel-preset": "^8.1.2",
@@ -51,6 +52,9 @@
     "lint": "eslint \"**/*.{js,ts}\"",
     "test": " jest --config ./jest.config.js",
     "type-check": "tsc --noEmit",
-    "type-check:watch": "npm run type-check -- --watch"
-  }
+    "type-check:watch": "npm run type-check -- --watch",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
+  },
+  "snyk": true
 }