From 62f5c7dfcf4f3b39fb917c53742a98617ee79c27 Mon Sep 17 00:00:00 2001 From: Spencer Norman Date: Sun, 5 Aug 2018 16:58:14 -0600 Subject: [PATCH] fix: add chownr to snyk ignore file Chownr has a recently reported issue to snyk, though the issue itself has been known for over a year. https://github.com/isaacs/chownr/issues/14 This issue has been introduced via sharp via tar and tar-fs npm packages We'll continue to follow this issue on the chownr repo. And I've added a comment to the issue thread. https://github.com/isaacs/chownr/issues/14#issuecomment-410554921 --- .snyk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.snyk b/.snyk index 793c8dca360..d5f27f078bb 100644 --- a/.snyk +++ b/.snyk @@ -22,3 +22,7 @@ ignore: - '*': reason: "extend and request have updated, waiting on twillio and a few other packages to update to the latest requestpackage" expires: '2018-08-26T20:23:03.274Z' + 'npm:chownr:20180731': + - '*': + reason: "Known bug https://github.com/isaacs/chownr/issues/14, unknown time to patch" + expires: '2018-08-30T20:23:03.274Z' \ No newline at end of file