diff --git a/deps/v8/tools/clusterfuzz/js_fuzzer/.snyk b/deps/v8/tools/clusterfuzz/js_fuzzer/.snyk new file mode 100644 index 00000000000000..4a1b9fb1bff7f8 --- /dev/null +++ b/deps/v8/tools/clusterfuzz/js_fuzzer/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash': + patched: '2022-03-25T23:24:42.936Z' diff --git a/deps/v8/tools/clusterfuzz/js_fuzzer/package.json b/deps/v8/tools/clusterfuzz/js_fuzzer/package.json index 5a7796e6777485..9b699528e212ed 100644 --- a/deps/v8/tools/clusterfuzz/js_fuzzer/package.json +++ b/deps/v8/tools/clusterfuzz/js_fuzzer/package.json @@ -4,7 +4,9 @@ "description": "", "main": "run.js", "scripts": { - "test": "APP_NAME=d8 mocha" + "test": "APP_NAME=d8 mocha", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "bin": "run.js", "author": "ochang@google.com", @@ -18,7 +20,8 @@ "commander": "^2.11.0", "globals": "^10.1.0", "tempfile": "^3.0.0", - "tempy": "^0.5.0" + "tempy": "^0.5.0", + "@snyk/protect": "latest" }, "devDependencies": { "eslint": "^6.8.0", @@ -29,5 +32,6 @@ }, "pkg": { "assets": "resources/**/*" - } + }, + "snyk": true }