Merge pull request WebOfTrust#175 from lenkan/fix-vulnerabilities

add npm audit to workflow, remove vulnerable packages
nkongsuwan · Dec 13, 2023 · d311c1e · d311c1e
2 parents 517b981 + 400d561
commit d311c1e
Show file tree

Hide file tree

Showing 4 changed files with 842 additions and 6,400 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -73,3 +73,16 @@ jobs:
         run: docker compose logs
         if: always()
 
+  audit:
+    name: Find vulnerabilities
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v2
+
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '18.12.1'
+          cache: 'npm'
+      - name: Run audit
+        run: npm audit