diff --git a/.snyk b/.snyk
new file mode 100644
index 00000000000..bc8faf62cbd
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.8.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:marked:20170907':
+    - marked:
+        patched: '2017-10-26T22:17:10.047Z'
diff --git a/package.json b/package.json
index 416bbf6c8b9..ec0ec823b1a 100644
--- a/package.json
+++ b/package.json
@@ -74,7 +74,8 @@
     "typescript-simple": "1.0.0",
     "underscore-plus": "^1.6.6",
     "winreg": "^1.2.1",
-    "yargs": "^3.23.0"
+    "yargs": "^3.23.0",
+    "snyk": "^1.46.0"
   },
   "packageDependencies": {
     "atom-dark-syntax": "0.28.0",
@@ -173,7 +174,9 @@
   "private": true,
   "scripts": {
     "preinstall": "node -e 'process.exit(0)'",
-    "test": "node script/test"
+    "test": "node script/test",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "standard": {
     "env": {
@@ -186,5 +189,6 @@
       "atom",
       "snapshotResult"
     ]
-  }
+  },
+  "snyk": true
 }