mirror of
https://github.com/AutoMaker-Org/automaker.git
synced 2026-01-30 14:22:02 +00:00
2250367ddc
- Changed the npm audit command in the security audit workflow to check for critical vulnerabilities instead of moderate ones. - This adjustment enhances the security posture of the application by ensuring that critical issues are identified and addressed promptly.
31 lines
541 B
YAML
31 lines
541 B
YAML
name: Security Audit
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- '*'
|
|
push:
|
|
branches:
|
|
- main
|
|
- master
|
|
schedule:
|
|
# Run weekly on Mondays at 9 AM UTC
|
|
- cron: '0 9 * * 1'
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup project
|
|
uses: ./.github/actions/setup-project
|
|
with:
|
|
check-lockfile: 'true'
|
|
|
|
- name: Run npm audit
|
|
run: npm audit --audit-level=critical
|
|
continue-on-error: false
|