Merge d623809 into a198958

.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - probot > @octokit/rest > lodash:
+        patched: '2020-05-01T04:25:35.551Z'

package.json

@@ -26,7 +26,9 @@
     "travis-deploy-once": "travis-deploy-once",
     "semantic-release": "semantic-release",
     "contributors:add": "all-contributors add",
-    "contributors:generate": "all-contributors generate"
+    "contributors:generate": "all-contributors generate",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "release": {
     "plugins": [
@@ -58,7 +60,8 @@
     "probot": "^7.2.0",
     "tslint": "^5.11.0",
     "typescript": "^3.1.6",
-    "jsonfile": "^5.0.0"
+    "jsonfile": "^5.0.0",
+    "snyk": "^1.316.1"
   },
   "devDependencies": {
     "@commitlint/cli": "^7.2.1",
@@ -118,5 +121,6 @@
         }
       ]
     ]
-  }
+  },
+  "snyk": true
 }