diff --git a/packages/mobile/.snyk b/packages/mobile/.snyk new file mode 100644 index 00000000000..ebae94aad31 --- /dev/null +++ b/packages/mobile/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - graphql-code-generator > graphql-toolkit > lodash: + patched: '2022-04-24T02:04:21.320Z' diff --git a/packages/mobile/package.json b/packages/mobile/package.json index d86264bc31e..731d493dd4e 100644 --- a/packages/mobile/package.json +++ b/packages/mobile/package.json @@ -32,10 +32,11 @@ "test:detox": "CELO_TEST_CONFIG=e2e detox test -c android.emu.debug -a e2e/tmp/ --take-screenshots=failing --record-logs=failing --detectOpenHandles", "test:unlock": "./scripts/unlock.sh", "deploy:update-version": "./scripts/update-version.sh", - "prepare": "patch-package", + "prepare": "npm run snyk-protect && patch-package", "postinstall": "sh scripts/fix_rn_version.sh; patch-package", "update-disclaimer": "yarn licenses generate-disclaimer > LicenseDisclaimer.txt && mkdir -p android/app/src/main/assets/custom && cp LicenseDisclaimer.txt android/app/src/main/assets/custom/LicenseDisclaimer.txt", - "test-licenses": "yarn licenses list --prod | grep '\\(─ GPL\\|─ (GPL-[1-9]\\.[0-9]\\+ OR GPL-[1-9]\\.[0-9]\\+)\\)' && echo 'Found GPL license(s). Use 'yarn licenses list --prod' to look up the offending package' || echo 'No GPL licenses found'" + "test-licenses": "yarn licenses list --prod | grep '\\(─ GPL\\|─ (GPL-[1-9]\\.[0-9]\\+ OR GPL-[1-9]\\.[0-9]\\+)\\)' && echo 'Found GPL license(s). Use 'yarn licenses list --prod' to look up the offending package' || echo 'No GPL licenses found'", + "snyk-protect": "snyk-protect" }, "rnpm": { "assets": [ @@ -45,7 +46,7 @@ "dependencies": { "@celo/client": "4fd835d", "@celo/client-integration": "npm:@celo/client@55cf94c", - "@celo/contractkit": "0.0.1", + "@celo/contractkit": "0.1.0", "@celo/react-native-sms-retriever": "git+https://github.com/celo-org/react-native-sms-retriever#d3a2fdb", "@celo/utils": "0.0.1", "@react-native-community/netinfo": "^2.0.4", @@ -130,7 +131,8 @@ "tslib": "^1.9.1", "utf8": "^3.0.0", "vm-browserify": "^1.0.1", - "web3": "1.0.0-beta.37" + "web3": "1.0.0-beta.37", + "@snyk/protect": "latest" }, "devDependencies": { "@babel/core": "^7.4.3", @@ -162,7 +164,7 @@ "enzyme-to-json": "^3.3.5", "escape-string-regexp": "^1.0.5", "graphql-code-generator": "^0.16.1", - "jest": "^24.8.0", + "jest": "^25.0.0", "jest-fetch-mock": "^2.1.2", "jest-junit": "^6.3.0", "jest-snapshot": "^24.8.0", @@ -200,5 +202,6 @@ "name": "Nexus_5X_API_28" } } - } + }, + "snyk": true }