We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b1f8c15 commit 8613a5bCopy full SHA for 8613a5b
.github/workflows/audit.yaml
@@ -0,0 +1,22 @@
1
+name: Audit
2
+
3
+on:
4
+ push:
5
6
+concurrency:
7
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
8
+ cancel-in-progress: true
9
10
+jobs:
11
+ audit:
12
+ runs-on: ubuntu-latest
13
+ steps:
14
+ - name: Checkout Repo
15
+ uses: actions/checkout@v4
16
+ - uses: pnpm/action-setup@v4
17
+ name: Install pnpm
18
+ with:
19
+ version: 9
20
+ run_install: false
21
+ - name: Audit for vulnerabilities
22
+ run: npx audit-ci@^7 --config ./audit-ci.jsonc
audit-ci.jsonc
@@ -0,0 +1,5 @@
+{
+ "critical": true,
+ "package-manager": "auto",
+ "registry": "https://registry.npmjs.org"
+}
0 commit comments