curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity

test: fix snyk unable to patch 

snyk requires GNU's patch that support --backup argument,
the argument is not supported by alpine built-in busybox's patch

https://github.com/snyk/snyk/issues/108#issuecomment-412937627
https://github.com/snyk/snyk/issues/99#issuecomment-322202989

previous commit (faa286cb5f) did not fix
This commit is contained in:
curben 2018-10-30 20:29:09 +10:30
parent 5ab689f989
commit efe8183b85
2 changed files with 9 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitlab-ci.yml
View File

@ -9,6 +9,7 @@ before_script:
test:
script:
- apk add patch # Install GNU version of patch for snyk
- npm run build
only:

20
.snyk
View File

@ -25,17 +25,13 @@ ignore:
- renovate > docker-registry-client > tough-cookie:
reason: Patch/update unavailable
expires: '2018-12-31T00:00:00.000Z'
'npm:lodash:20180130':
- renovate > docker-registry-client > restify-clients > restify-errors > lodash:
reason: Patch failure
expires: '2018-11-31T00:00:00.000Z'
- renovate > docker-registry-client > restify-errors > lodash:
reason: Patch failure
expires: '2018-11-31T00:00:00.000Z'
'npm:tough-cookie:20160722':
- renovate > docker-registry-client > tough-cookie:
reason: Patch failure
expires: '2018-11-31T00:00:00.000Z'
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:lodash:20180130':
- renovate > docker-registry-client > restify-clients > restify-errors > lodash:
patched: '2018-10-27T00:00:00.000Z'
- renovate > docker-registry-client > restify-errors > lodash:
patched: '2018-10-27T00:00:00.000Z'
'npm:tough-cookie:20160722':
- renovate > docker-registry-client > tough-cookie:
patched: '2018-10-27T00:00:00.000Z'