diff --git a/test/fixtures/protect-via-snyk/.snyk b/test/fixtures/protect-via-snyk/.snyk
index a241f75ecd..6ceaa00835 100644
--- a/test/fixtures/protect-via-snyk/.snyk
+++ b/test/fixtures/protect-via-snyk/.snyk
@@ -1,5 +1,23 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+# patches apply the minimum changes required to fix a vulnerability
 patch:
   'npm:semver:20150403':
     - semver@2.3.2:
         patched: '2015-10-27T16:30:18.628Z'
+  SNYK-JS-LODASH-567746:
+    - snyk > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
+    - snyk > inquirer > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
+    - snyk > snyk-config > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
+    - snyk > snyk-nuget-plugin > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
+    - snyk > snyk-php-plugin > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
+    - snyk > snyk-go-plugin > graphlib > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
+    - snyk > snyk-nodejs-lockfile-parser > lodash:
+        patched: '2020-05-01T07:17:40.629Z'
 ignore: {}
+version: v1.14.1
diff --git a/test/fixtures/protect-via-snyk/package.json b/test/fixtures/protect-via-snyk/package.json
index 2a55c7e80d..7c5c4d1cfc 100644
--- a/test/fixtures/protect-via-snyk/package.json
+++ b/test/fixtures/protect-via-snyk/package.json
@@ -6,13 +6,14 @@
   "dependencies": {
     "semver": "^2.3.2",
     "get-uri": "2.0.2",
-    "snyk": "*"
+    "snyk": "^1.316.1"
   },
   "scripts": {
     "env": "env",
     "test": "snyk test && echo \"Error: no test specified\" && exit 1",
     "snyk-protect": "snyk protect",
-    "postinstall": "npm run snyk-protect"
+    "postinstall": "npm run snyk-protect",
+    "prepare": "yarn run snyk-protect"
   },
   "author": "",
   "license": "ISC",