feat(repo): add npm audit report on ci

It will fail only if critical vulnerabilities are found.
This commit is contained in:
Tasos Bekos 2021-02-12 14:45:17 +02:00 committed by Victor Savkin
parent aa311fa073
commit 9275d1c128

15
.github/workflows/npm-audit.yml vendored Normal file
View File

@ -0,0 +1,15 @@
name: NPM Audit
on:
schedule:
- cron: "0 0 * * *"
jobs:
audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Run a security audit
run: npx audit-ci --critical --report-type summary