From 41590ee3c4b6adff8204bd96399738a0621cd913 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 17 Sep 2024 19:55:53 +0000 Subject: [PATCH] fix: staging/src/k8s.io/kubectl/docs/book/package.json & staging/src/k8s.io/kubectl/docs/book/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- staging/src/k8s.io/kubectl/docs/book/.snyk | 18 ++++++++++++++++++ .../src/k8s.io/kubectl/docs/book/package.json | 10 +++++++--- 2 files changed, 25 insertions(+), 3 deletions(-) create mode 100644 staging/src/k8s.io/kubectl/docs/book/.snyk diff --git a/staging/src/k8s.io/kubectl/docs/book/.snyk b/staging/src/k8s.io/kubectl/docs/book/.snyk new file mode 100644 index 0000000000000..c0f8875416f86 --- /dev/null +++ b/staging/src/k8s.io/kubectl/docs/book/.snyk @@ -0,0 +1,18 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - gitbook-cli > npm > request > hawk > hoek: + patched: '2024-09-17T19:55:49.947Z' + id: 'npm:hoek:20180212' + path: gitbook-cli > npm > request > hawk > hoek + - gitbook-cli > npm > request > hawk > boom > hoek: + patched: '2024-09-17T19:55:49.947Z' + id: 'npm:hoek:20180212' + path: gitbook-cli > npm > request > hawk > boom > hoek + - gitbook-cli > npm > request > hawk > sntp > hoek: + patched: '2024-09-17T19:55:49.947Z' + id: 'npm:hoek:20180212' + path: gitbook-cli > npm > request > hawk > sntp > hoek diff --git a/staging/src/k8s.io/kubectl/docs/book/package.json b/staging/src/k8s.io/kubectl/docs/book/package.json index 9fbfabdff2407..c03e62e2c2694 100644 --- a/staging/src/k8s.io/kubectl/docs/book/package.json +++ b/staging/src/k8s.io/kubectl/docs/book/package.json @@ -20,12 +20,16 @@ "gitbook-plugin-toc": "0.0.2", "lodash": "4.17.13", "phantomjs-prebuilt": "^2.1.16", - "underscore.string": "^3.3.5" + "underscore.string": "^3.3.5", + "@snyk/protect": "latest" }, "devDependencies": {}, "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "author": "", - "license": "Apache-2.0" + "license": "Apache-2.0", + "snyk": true }