Merge pull request #397 from st3phhays/yarn-npm-audit

(build) Add yarn npm audit workflow
chocolatey · May 6, 2024 · b4f1d08 · b4f1d08
2 parents 6d9f752 + fb32458
commit b4f1d08
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
@@ -0,0 +1,14 @@
+name: yarn npm audit
+on: [pull_request]
+jobs:
+  yarn-npm-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - run: yarn install --immutable
+      - name: Run yarn npm audit
+        run: yarn npm audit --severity moderate
+        continue-on-error: false