From a8eb9597ec1d12a244dddc9814ef298f0a527e6b Mon Sep 17 00:00:00 2001 From: Spencer Norman Date: Fri, 5 Jul 2019 14:39:19 -0600 Subject: [PATCH 1/3] chore: ignore lodash SNYK-JS-LODASH-450202 until fix is released Signed-off-by: Spencer Norman --- .snyk | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 149e8653edf..102c3f7c231 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,12 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.5 +version: v1.11.0 patch: {} +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + SNYK-JS-LODASH-450202: + - '*': + reason: >- + No remediation available at this time. I cannot find any examples of + defaultsDeep in our codebase. Tracking this PR for release: + https://github.com/lodash/lodash/pull/4336 + expires: '2019-07-11T20:17:33.015Z' \ No newline at end of file From c1aa7c863ec859a2f88d07f410c95dea0be9a8ea Mon Sep 17 00:00:00 2001 From: Spencer Norman Date: Fri, 5 Jul 2019 14:52:41 -0600 Subject: [PATCH 2/3] chore: update .snyk file version Signed-off-by: Spencer Norman --- .snyk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 102c3f7c231..6ebd95cef10 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.11.0 +version: v1.13.5 patch: {} # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: From 01e8227a446eb711afda17b67c7435aa342c0f87 Mon Sep 17 00:00:00 2001 From: Spencer Norman Date: Fri, 5 Jul 2019 14:56:57 -0600 Subject: [PATCH 3/3] chore: add newline at EOF for .snyk Signed-off-by: Spencer Norman --- .snyk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 6ebd95cef10..ec1b44a7fdf 100644 --- a/.snyk +++ b/.snyk @@ -9,4 +9,4 @@ ignore: No remediation available at this time. I cannot find any examples of defaultsDeep in our codebase. Tracking this PR for release: https://github.com/lodash/lodash/pull/4336 - expires: '2019-07-11T20:17:33.015Z' \ No newline at end of file + expires: '2019-07-11T20:17:33.015Z'