chore(repo): use npx over yarn for audit checks (#11096)
This commit is contained in:
parent
8683d364f8
commit
4a3a223d07
6
.github/workflows/npm-audit.yml
vendored
6
.github/workflows/npm-audit.yml
vendored
@ -16,10 +16,10 @@ jobs:
|
|||||||
run: npx audit-ci --critical --report-type summary
|
run: npx audit-ci --critical --report-type summary
|
||||||
|
|
||||||
- name: Check lock file for invalid hosts
|
- name: Check lock file for invalid hosts
|
||||||
run: yarn lockfile-lint -s -n -p yarn.lock -a hosts yarn npm
|
run: npx lockfile-lint -s -n -p yarn.lock -a hosts yarn npm
|
||||||
|
|
||||||
- name: Run Dependency confusion supply chain check
|
- name: Run Dependency confusion supply chain check
|
||||||
run: npx snync -d .
|
run: npx snync -d .
|
||||||
|
|
||||||
- name: Report Status
|
- name: Report Status
|
||||||
if: ${{ always() && github.repository_owner == 'nrwl' }}
|
if: ${{ always() && github.repository_owner == 'nrwl' }}
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user