diff --git a/apps/api/v2/.snyk b/apps/api/v2/.snyk new file mode 100644 index 0000000000..5891973cc6 --- /dev/null +++ b/apps/api/v2/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:semver:20150403': + - '@calcom/platform-libraries-0.0.2 > @calcom/features > @calcom/atoms > rollup-plugin-node-builtins > browserify-fs > levelup > semver': + patched: '2025-03-05T12:50:30.654Z' + id: 'npm:semver:20150403' + path: >- + @calcom/platform-libraries-0.0.2 > @calcom/features > @calcom/atoms > + rollup-plugin-node-builtins > browserify-fs > levelup > semver diff --git a/apps/api/v2/package.json b/apps/api/v2/package.json index e604be4a3b..e9b99fcc87 100644 --- a/apps/api/v2/package.json +++ b/apps/api/v2/package.json @@ -24,7 +24,9 @@ "test:e2e:watch": "yarn dev:build && jest --runInBand --detectOpenHandles --forceExit --config ./jest-e2e.json --watch", "prisma": "yarn workspace @calcom/prisma prisma", "generate-schemas": "yarn prisma generate && yarn prisma format", - "copy-swagger-module": "ts-node -r tsconfig-paths/register swagger/copy-swagger-module.ts" + "copy-swagger-module": "ts-node -r tsconfig-paths/register swagger/copy-swagger-module.ts", + "prepare": "yarn run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "@axiomhq/winston": "^1.2.0", @@ -75,7 +77,8 @@ "uuid": "^8.3.2", "winston": "^3.13.0", "winston-transport": "^4.7.0", - "zod": "^3.22.4" + "zod": "^3.22.4", + "@snyk/protect": "latest" }, "devDependencies": { "@nestjs/cli": "^10.0.0", @@ -102,5 +105,6 @@ }, "prisma": { "schema": "../../../packages/prisma/schema.prisma" - } + }, + "snyk": true }