diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/.snyk b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/.snyk
new file mode 100644
index 0000000000000..49d87d6a2f346
--- /dev/null
+++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/.snyk
@@ -0,0 +1,40 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:hawk:20160119':
+    - codecov.io > request > hawk:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:hawk:20160119'
+        path: codecov.io > request > hawk
+  'npm:http-signature:20150122':
+    - codecov.io > request > http-signature:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:http-signature:20150122'
+        path: codecov.io > request > http-signature
+  'npm:mime:20170907':
+    - codecov.io > request > form-data > mime:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:mime:20170907'
+        path: codecov.io > request > form-data > mime
+  'npm:minimatch:20160620':
+    - mocha > glob > minimatch:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:minimatch:20160620'
+        path: mocha > glob > minimatch
+  'npm:request:20160119':
+    - codecov.io > request:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:request:20160119'
+        path: codecov.io > request
+  'npm:tunnel-agent:20170305':
+    - codecov.io > request > tunnel-agent:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:tunnel-agent:20170305'
+        path: codecov.io > request > tunnel-agent
+  'npm:uglify-js:20151024':
+    - istanbul > handlebars > uglify-js:
+        patched: '2024-10-24T14:48:53.054Z'
+        id: 'npm:uglify-js:20151024'
+        path: istanbul > handlebars > uglify-js
diff --git a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/package.json b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/package.json
index d20ed7f9d5b1f..e719024f23fe5 100644
--- a/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/package.json
+++ b/workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/log-driver/package.json
@@ -15,18 +15,20 @@
     "url": "git://github.com/cainus/logdriver.git"
   },
   "scripts": {
-    "test": "make test-codecov"
+    "test": "make test-codecov",
+    "prepublish": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "maintainers": [
     "Gregg Caines <gregg@caines.ca> (http://caines.ca)"
   ],
   "devDependencies": {
     "codecov.io": "0.0.1",
-    "jshint": "2.4.4",
-    "istanbul": "0.2.6",
-    "coveralls": "2.10.0",
+    "jshint": "2.13.4",
+    "istanbul": "0.4.5",
+    "coveralls": "3.0.5",
     "sinon-restore": "1.0.1",
-    "mocha": "1.20.1",
+    "mocha": "10.1.0",
     "should": "1.1.0"
   },
   "engines": {
@@ -38,5 +40,9 @@
     "test": "test"
   },
   "author": "Gregg Caines",
-  "license": "ISC"
+  "license": "ISC",
+  "snyk": true,
+  "dependencies": {
+    "@snyk/protect": "latest"
+  }
 }