If snyk is changing your "resolved" URLs in your lockfile, it means that you are using a private repository for your JS packages, so snyk doesn't know the correct URL of the hosted packages in your private repository.
In this case, you can set Snyk not re-lock the lock file in order not to change the resolved links in the lockfile.
Then you can fetch the PR locally, re-lock the lock file, and push the changes back to the repo.
Snyk is building interactions with private repositories; please contact email@example.com if you are requesting this feature.
If you are using a SAAS version of artifactory for Maven projects, please read the next article:
If you are using private Gems for Ruby or private artifactory, please contact Snyk firstname.lastname@example.org,