diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000000000..ad1f4723660b5
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-HTTPSPROXYAGENT-469131:
+    - https-proxy-agent:
+        patched: '2019-10-04T05:49:22.674Z'
+    - vscode-proxy-agent > https-proxy-agent:
+        patched: '2019-10-04T05:49:22.674Z'
diff --git a/package.json b/package.json
index 4f78caf443ef1..ada718781ce4f 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,9 @@
     "monaco-compile-check": "tsc -p src/tsconfig.monaco.json --noEmit",
     "download-builtin-extensions": "node build/lib/builtInExtensions.js",
     "strict-null-check": "tsc -p src/tsconfig.strictNullChecks.json",
-    "strict-null-check-watch": "tsc -p src/tsconfig.strictNullChecks.json --watch"
+    "strict-null-check-watch": "tsc -p src/tsconfig.strictNullChecks.json --watch",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "dependencies": {
     "applicationinsights": "1.0.8",
@@ -56,7 +58,8 @@
     "vscode-xterm": "3.11.0-beta1",
     "winreg": "^1.2.4",
     "yauzl": "^2.9.1",
-    "yazl": "^2.4.3"
+    "yazl": "^2.4.3",
+    "snyk": "^1.230.5"
   },
   "devDependencies": {
     "7zip": "0.0.6",
@@ -149,5 +152,6 @@
     "windows-foreground-love": "0.1.0",
     "windows-mutex": "0.2.1",
     "windows-process-tree": "0.2.3"
-  }
+  },
+  "snyk": true
 }