feat(repo): add npm audit report on ci
It will fail only if critical vulnerabilities are found.
This commit is contained in:
parent
aa311fa073
commit
9275d1c128
15
.github/workflows/npm-audit.yml
vendored
Normal file
15
.github/workflows/npm-audit.yml
vendored
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
name: NPM Audit
|
||||||
|
|
||||||
|
on:
|
||||||
|
schedule:
|
||||||
|
- cron: "0 0 * * *"
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
audit:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
|
||||||
|
- name: Run a security audit
|
||||||
|
run: npx audit-ci --critical --report-type summary
|
||||||
Loading…
x
Reference in New Issue
Block a user