Skip to content

Commit 3ef16f5

Browse files
committed
ci: add security audit check to workflow
Add yarn npm audit to CI pipeline to check for high severity vulnerabilities in dependencies. Configured as non-blocking to avoid disrupting development workflow.
1 parent 3131985 commit 3ef16f5

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

.github/workflows/ci.yaml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,3 +57,17 @@ jobs:
5757
cache: "yarn"
5858
- run: yarn install
5959
- run: yarn storybook:build
60+
61+
security:
62+
name: Security Check
63+
runs-on: ubuntu-latest
64+
steps:
65+
- uses: actions/checkout@v3
66+
- uses: actions/setup-node@v3
67+
with:
68+
node-version: 20
69+
cache: "yarn"
70+
- run: yarn install
71+
- name: Audit dependencies for high severity vulnerabilities
72+
run: yarn npm audit --severity high
73+
continue-on-error: true

0 commit comments

Comments
 (0)