ci: monitor for critical vul (#3187)

Co-authored-by: Nicolas Burtey <[email protected]>

Makefile

@@ -39,3 +39,6 @@ e2e-ios: reset-e2e
 e2e-android: reset-e2e
 	yarn e2e:build android.emu.debug
 	yarn e2e:test android.emu.debug
+
+make audit:
+	./audit.sh

audit.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+# Run yarn audit and filter for critical vulnerabilities
+result=$(yarn audit --json | jq 'select(.type == "auditAdvisory" and .data.advisory.severity == "critical")')
+
+# Check if any critical vulnerabilities were found
+if [ -z "$result" ]; then
+    echo "No critical vulnerabilities found."
+    exit 0
+else
+    echo "Critical vulnerabilities found:"
+    echo "$result" | jq
+    exit 1
+fi

package.json

@@ -246,7 +246,7 @@
     "react-test-renderer": "18.2.0",
     "rimraf": "4.4.1",
     "sharp": "^0.32.5",
-    "solidarity": "^3.0.0",
+    "solidarity": "^3.0.4",
     "ts-jest": "^29.1.1",
     "ts-node": "^10.9.2",
     "tsconfig-paths": "^4.1.2",
@@ -269,7 +269,8 @@
     }
   },
   "resolutions": {
-    "types-ramda": "0.29.4"
+    "types-ramda": "0.29.4",
+    "ejs": "3.1.9"
   },
   "engines": {
     "node": ">=16"

yarn.lock

@@ -10696,12 +10696,7 @@ [email protected]:
   resolved "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
   integrity sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==
 
-ejs@^2.6.1:
-  version "2.7.4"
-  resolved "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz#48661287573dcc53e366c7a1ae52c3a120eec9ba"
-  integrity sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA==
-
-ejs@^3.1.5, ejs@^3.1.9:
+[email protected], ejs@^2.6.1, ejs@^3.1.5, ejs@^3.1.9:
   version "3.1.9"
   resolved "https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz#03c9e8777fe12686a9effcef22303ca3d8eeb361"
   integrity sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ==
@@ -21589,7 +21584,7 @@ socks@^2.7.1:
     ip "^2.0.0"
     smart-buffer "^4.2.0"
 
-solidarity@^3.0.0:
+solidarity@^3.0.4:
   version "3.0.4"
   resolved "https://registry.npmjs.org/solidarity/-/solidarity-3.0.4.tgz#f8fcc60b46093cb27b4b30f4dff22af27d7b43d8"
   integrity sha512-NvFubiZi4+E7lHfDIU++yTaJWrPyUFU/zqb9/jHd5MLhCMpKENAjidAyw9dIxXXXuPO9o/s9mPu7d8FvcCnyXg==
@@ -22825,7 +22820,7 @@ ts-log@^2.2.3:
 
 ts-node@^10.9.2:
   version "10.9.2"
-  resolved "https://registry.yarnpkg.com/ts-node/-/ts-node-10.9.2.tgz#70f021c9e185bccdca820e26dc413805c101c71f"
+  resolved "https://registry.npmjs.org/ts-node/-/ts-node-10.9.2.tgz#70f021c9e185bccdca820e26dc413805c101c71f"
   integrity sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ==
   dependencies:
     "@cspotcode/source-map-support" "^0.8.0"