From f9145cd946cc7d042b24e67f9abffed3c66fae23 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 14 Sep 2024 23:13:39 +0000 Subject: [PATCH] fix: staging/src/k8s.io/kubectl/docs/book/package.json & staging/src/k8s.io/kubectl/docs/book/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- staging/src/k8s.io/kubectl/docs/book/.snyk | 18 ++++++++++++++++++ .../src/k8s.io/kubectl/docs/book/package.json | 10 +++++++--- 2 files changed, 25 insertions(+), 3 deletions(-) create mode 100644 staging/src/k8s.io/kubectl/docs/book/.snyk diff --git a/staging/src/k8s.io/kubectl/docs/book/.snyk b/staging/src/k8s.io/kubectl/docs/book/.snyk new file mode 100644 index 0000000000000..8243b9fa391ea --- /dev/null +++ b/staging/src/k8s.io/kubectl/docs/book/.snyk @@ -0,0 +1,18 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - gitbook-cli > npm > request > hawk > hoek: + patched: '2024-09-14T23:13:36.620Z' + id: 'npm:hoek:20180212' + path: gitbook-cli > npm > request > hawk > hoek + - gitbook-cli > npm > request > hawk > boom > hoek: + patched: '2024-09-14T23:13:36.620Z' + id: 'npm:hoek:20180212' + path: gitbook-cli > npm > request > hawk > boom > hoek + - gitbook-cli > npm > request > hawk > sntp > hoek: + patched: '2024-09-14T23:13:36.620Z' + id: 'npm:hoek:20180212' + path: gitbook-cli > npm > request > hawk > sntp > hoek diff --git a/staging/src/k8s.io/kubectl/docs/book/package.json b/staging/src/k8s.io/kubectl/docs/book/package.json index 9fbfabdff2407..c03e62e2c2694 100644 --- a/staging/src/k8s.io/kubectl/docs/book/package.json +++ b/staging/src/k8s.io/kubectl/docs/book/package.json @@ -20,12 +20,16 @@ "gitbook-plugin-toc": "0.0.2", "lodash": "4.17.13", "phantomjs-prebuilt": "^2.1.16", - "underscore.string": "^3.3.5" + "underscore.string": "^3.3.5", + "@snyk/protect": "latest" }, "devDependencies": {}, "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "author": "", - "license": "Apache-2.0" + "license": "Apache-2.0", + "snyk": true }