diff --git a/docs/.snyk b/docs/.snyk new file mode 100644 index 0000000000..5821630b2d --- /dev/null +++ b/docs/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - node-sass > sass-graph > lodash: + patched: '2020-05-01T01:51:20.970Z' + - node-sass > gaze > globule > lodash: + patched: '2020-05-01T01:51:20.970Z' diff --git a/docs/package.json b/docs/package.json index a950c88d32..03d12fb584 100644 --- a/docs/package.json +++ b/docs/package.json @@ -1,6 +1,12 @@ { "dependencies": { "bulma": "^0.6.1", - "node-sass": "^4.7.2" - } + "node-sass": "^4.7.2", + "snyk": "^1.316.1" + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" + }, + "snyk": true }