Skip to content

Commit

Permalink
fix: functions/.snyk & functions/package.json to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-AXIOS-174505
  • Loading branch information
snyk-bot committed May 5, 2019
1 parent 6943196 commit 6102992
Show file tree
Hide file tree
Showing 2 changed files with 45 additions and 3 deletions.
38 changes: 38 additions & 0 deletions functions/.snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.3
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-AXIOS-174505:
- firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > google-auth-library > gtoken > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > google-auth-library > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > google-auth-library > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > google-gax > google-auto-auth > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > @google-cloud/common-grpc > @google-cloud/common > google-auto-auth > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > google-gax > google-auto-auth > google-auth-library > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > google-gax > google-auto-auth > google-auth-library > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > google-gax > google-auto-auth > google-auth-library > gtoken > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > google-auth-library > gtoken > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > @google-cloud/common-grpc > @google-cloud/common > google-auto-auth > google-auth-library > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > google-auth-library > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > google-auth-library > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > @google-cloud/common-grpc > @google-cloud/common > google-auto-auth > google-auth-library > gcp-metadata > axios:
patched: '2019-05-05T23:31:24.742Z'
- firebase-admin > @google-cloud/firestore > @google-cloud/common-grpc > @google-cloud/common > google-auto-auth > google-auth-library > gtoken > axios:
patched: '2019-05-05T23:31:24.742Z'
10 changes: 7 additions & 3 deletions functions/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -7,15 +7,19 @@
"shell": "firebase experimental:functions:shell",
"start": "npm run shell",
"deploy": "firebase deploy --only functions",
"logs": "firebase functions:log"
"logs": "firebase functions:log",
"snyk-protect": "snyk protect",
"prepare": "npm run snyk-protect"
},
"dependencies": {
"firebase-admin": "~5.8.1",
"firebase-functions": "^0.8.1"
"firebase-functions": "^0.8.1",
"snyk": "^1.161.1"
},
"devDependencies": {
"eslint": "^4.12.0",
"eslint-plugin-promise": "^3.6.0"
},
"private": true
"private": true,
"snyk": true
}

0 comments on commit 6102992

Please sign in to comment.