From 696458db384b6eae408df83de878ac2dc7585773 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 May 2019 04:57:08 +0000 Subject: [PATCH] fix: firebase/functions/.snyk & firebase/functions/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-AXIOS-174505 --- firebase/functions/.snyk | 28 ++++++++++++++++++++++++++++ firebase/functions/package.json | 10 +++++++--- 2 files changed, 35 insertions(+), 3 deletions(-) create mode 100644 firebase/functions/.snyk diff --git a/firebase/functions/.snyk b/firebase/functions/.snyk new file mode 100644 index 0000000..2433f51 --- /dev/null +++ b/firebase/functions/.snyk @@ -0,0 +1,28 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - firebase-admin > @google-cloud/firestore > google-gax > google-auth-library > gcp-metadata > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/firestore > google-gax > google-auth-library > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > google-auth-library > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > gcp-metadata > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > gcp-metadata > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/firestore > google-gax > google-auth-library > gtoken > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > google-auth-library > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > google-auth-library > gtoken > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > google-auth-library > gtoken > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > @google-cloud/common > google-auto-auth > google-auth-library > gcp-metadata > axios: + patched: '2019-05-06T04:57:07.188Z' + - firebase-admin > @google-cloud/storage > gcs-resumable-upload > google-auto-auth > google-auth-library > gcp-metadata > axios: + patched: '2019-05-06T04:57:07.188Z' diff --git a/firebase/functions/package.json b/firebase/functions/package.json index 7aea016..c8315f6 100644 --- a/firebase/functions/package.json +++ b/firebase/functions/package.json @@ -6,12 +6,16 @@ "shell": "firebase functions:shell", "start": "npm run shell", "deploy": "firebase deploy --only functions", - "logs": "firebase functions:log" + "logs": "firebase functions:log", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "firebase-admin": "~6.0.0", "firebase-functions": "^2.0.3", - "request": "^2.88.0" + "request": "^2.88.0", + "snyk": "^1.161.1" }, - "private": true + "private": true, + "snyk": true }