diff --git a/Makefile b/Makefile index fcb390194e..dae01a987c 100644 --- a/Makefile +++ b/Makefile @@ -39,3 +39,6 @@ e2e-ios: reset-e2e e2e-android: reset-e2e yarn e2e:build android.emu.debug yarn e2e:test android.emu.debug + +make audit: + ./audit.sh diff --git a/audit.sh b/audit.sh new file mode 100755 index 0000000000..b3ee6468c1 --- /dev/null +++ b/audit.sh @@ -0,0 +1,14 @@ +#!/bin/bash + +# Run yarn audit and filter for critical vulnerabilities +result=$(yarn audit --json | jq 'select(.type == "auditAdvisory" and .data.advisory.severity == "critical")') + +# Check if any critical vulnerabilities were found +if [ -z "$result" ]; then + echo "No critical vulnerabilities found." + exit 0 +else + echo "Critical vulnerabilities found:" + echo "$result" | jq + exit 1 +fi diff --git a/package.json b/package.json index abdf5eddb2..551d28b792 100644 --- a/package.json +++ b/package.json @@ -246,7 +246,7 @@ "react-test-renderer": "18.2.0", "rimraf": "4.4.1", "sharp": "^0.32.5", - "solidarity": "^3.0.0", + "solidarity": "^3.0.4", "ts-jest": "^29.1.1", "ts-node": "^10.9.2", "tsconfig-paths": "^4.1.2", @@ -269,7 +269,8 @@ } }, "resolutions": { - "types-ramda": "0.29.4" + "types-ramda": "0.29.4", + "ejs": "3.1.9" }, "engines": { "node": ">=16" diff --git a/yarn.lock b/yarn.lock index cb358c239e..1c26bb1b98 100644 --- a/yarn.lock +++ b/yarn.lock @@ -10696,12 +10696,7 @@ ee-first@1.1.1: resolved "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d" integrity sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow== -ejs@^2.6.1: - version "2.7.4" - resolved "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz#48661287573dcc53e366c7a1ae52c3a120eec9ba" - integrity sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA== - -ejs@^3.1.5, ejs@^3.1.9: +ejs@3.1.9, ejs@^2.6.1, ejs@^3.1.5, ejs@^3.1.9: version "3.1.9" resolved "https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz#03c9e8777fe12686a9effcef22303ca3d8eeb361" integrity sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ== @@ -21589,7 +21584,7 @@ socks@^2.7.1: ip "^2.0.0" smart-buffer "^4.2.0" -solidarity@^3.0.0: +solidarity@^3.0.4: version "3.0.4" resolved "https://registry.npmjs.org/solidarity/-/solidarity-3.0.4.tgz#f8fcc60b46093cb27b4b30f4dff22af27d7b43d8" integrity sha512-NvFubiZi4+E7lHfDIU++yTaJWrPyUFU/zqb9/jHd5MLhCMpKENAjidAyw9dIxXXXuPO9o/s9mPu7d8FvcCnyXg== @@ -22825,7 +22820,7 @@ ts-log@^2.2.3: ts-node@^10.9.2: version "10.9.2" - resolved "https://registry.yarnpkg.com/ts-node/-/ts-node-10.9.2.tgz#70f021c9e185bccdca820e26dc413805c101c71f" + resolved "https://registry.npmjs.org/ts-node/-/ts-node-10.9.2.tgz#70f021c9e185bccdca820e26dc413805c101c71f" integrity sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ== dependencies: "@cspotcode/source-map-support" "^0.8.0"