From b362da56abaed43d308d17758143dbba3185b012 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 18 Oct 2017 15:49:54 +0000 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are ignored: - https://snyk.io/vuln/npm:marked:20170907 - https://snyk.io/vuln/npm:shelljs:20140723 Latest report for coralproject/talk: https://snyk.io/test/github/coralproject/talk --- .snyk | 17 ++++++++++++++++- package.json | 2 +- 2 files changed, 17 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 3e46b4ab9..e8c995b60 100644 --- a/.snyk +++ b/.snyk @@ -1,6 +1,21 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. version: v1.7.1 -ignore: {} +# ignores vulnerabilities until expiry date; change duration by modifying expiry date +ignore: + 'npm:marked:20170907': + - marked: + reason: None given + expires: '2017-11-17T15:49:54.237Z' + - graphql-docs > marked: + reason: None given + expires: '2017-11-17T15:49:54.237Z' + - simplemde > marked: + reason: None given + expires: '2017-11-17T15:49:54.237Z' + 'npm:shelljs:20140723': + - react-mdl-selectfield > @kadira/storybook-deployer > shelljs: + reason: None given + expires: '2017-11-17T15:49:54.237Z' # patches apply the minimum changes required to fix a vulnerability patch: 'npm:marked:20170112': diff --git a/package.json b/package.json index 6743b8a09..2d08086ab 100644 --- a/package.json +++ b/package.json @@ -186,7 +186,7 @@ "webpack-sources": "^1.0.1", "yaml-loader": "^0.4.0", "yamljs": "^0.2.10", - "snyk": "^1.42.5" + "snyk": "^1.43.0" }, "devDependencies": { "@coralproject/eslint-config-talk": "^0.0.4", From 2227ec423f0a840a902220b6c0a4fccb71f492de Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 18 Oct 2017 16:36:12 +0000 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are ignored: - https://snyk.io/vuln/npm:tunnel-agent:20170305 Latest report for coralproject/talk: https://snyk.io/test/github/coralproject/talk --- .snyk | 4 ++++ package.json | 11 +++++++++-- 2 files changed, 13 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index e8c995b60..46cb67d7a 100644 --- a/.snyk +++ b/.snyk @@ -16,6 +16,10 @@ ignore: - react-mdl-selectfield > @kadira/storybook-deployer > shelljs: reason: None given expires: '2017-11-17T15:49:54.237Z' + 'npm:tunnel-agent:20170305': + - selenium-standalone > request > tunnel-agent: + reason: None given + expires: '2017-11-17T16:36:11.559Z' # patches apply the minimum changes required to fix a vulnerability patch: 'npm:marked:20170112': diff --git a/package.json b/package.json index 2d08086ab..6af76e062 100644 --- a/package.json +++ b/package.json @@ -15,6 +15,10 @@ "lint": "yamllint locales/*.yml && eslint --ext=.js --ext=.json bin/* .", "lint-fix": "yarn lint --fix", "jest-watch": "TEST_MODE=unit NODE_ENV=test jest --watch", + "e2e-ci": "./scripts/e2e-ci.sh", + "e2e-browserstack": "NODE_ENV=test ./scripts/e2e-browserstack.js --config nightwatch-browserstack.conf.js", + "pree2e": "selenium-standalone install", + "e2e": "NODE_ENV=test nightwatch", "test": "TEST_MODE=unit NODE_ENV=test jest && TEST_MODE=unit NODE_ENV=test mocha -R ${MOCHA_REPORTER:-spec}", "test-cover": "TEST_MODE=unit NODE_ENV=test istanbul cover _mocha --report text --check-coverage -- -R spec", "heroku-postbuild": "./bin/cli plugins reconcile && yarn build", @@ -169,10 +173,12 @@ "redux": "^3.6.0", "redux-thunk": "^2.1.0", "resolve": "^1.4.0", + "selenium-standalone": "^6.9.0", "semver": "^5.4.1", "simplemde": "^1.11.2", "smoothscroll-polyfill": "^0.3.5", "snake-case": "^2.1.0", + "snyk": "^1.43.0", "style-loader": "^0.16.0", "subscriptions-transport-ws": "^0.7.2", "timeago.js": "^2.0.3", @@ -185,14 +191,14 @@ "webpack": "^2.3.1", "webpack-sources": "^1.0.1", "yaml-loader": "^0.4.0", - "yamljs": "^0.2.10", - "snyk": "^1.43.0" + "yamljs": "^0.2.10" }, "devDependencies": { "@coralproject/eslint-config-talk": "^0.0.4", "babel-jest": "^21.2.0", "babel-plugin-dynamic-import-node": "^1.1.0", "babel-plugin-transform-es2015-modules-commonjs": "^6.26.0", + "browserstack-local": "^1.3.0", "chai": "^3.5.0", "chai-as-promised": "^6.0.0", "chai-http": "^3.0.0", @@ -204,6 +210,7 @@ "jest": "^21.2.1", "mocha": "^3.1.2", "mocha-junit-reporter": "^1.12.1", + "nightwatch": "^0.9.16", "nodemon": "^1.11.0", "pre-git": "^3.15.3", "sinon": "^3.2.1",