feat(repo): add npm audit report on ci
It will fail only if critical vulnerabilities are found.
This commit is contained in:
parent
aa311fa073
commit
9275d1c128
15
.github/workflows/npm-audit.yml
vendored
Normal file
15
.github/workflows/npm-audit.yml
vendored
Normal file
@ -0,0 +1,15 @@
|
||||
name: NPM Audit
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: "0 0 * * *"
|
||||
|
||||
jobs:
|
||||
audit:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
|
||||
- name: Run a security audit
|
||||
run: npx audit-ci --critical --report-type summary
|
||||
Loading…
x
Reference in New Issue
Block a user