We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5eb0255 commit a1f3a23Copy full SHA for a1f3a23
.github/workflows/security.yml
@@ -0,0 +1,31 @@
1
+name: Security checks
2
+on:
3
+ pull_request:
4
+ push:
5
+ branches:
6
+ - main
7
+
8
+jobs:
9
+ security:
10
+ runs-on: ubuntu-latest
11
+ steps:
12
+ - name: Fetch Sources
13
+ uses: actions/checkout@v4
14
15
+ - name: Enable Corepack
16
+ run: corepack enable
17
18
+ - name: Setup Node.js 22.x
19
+ uses: actions/setup-node@v4
20
+ with:
21
+ node-version: 22.x
22
+ cache: "yarn"
23
24
+ - name: Install dependencies
25
+ run: yarn install --immutable --check-cache --check-resolutions
26
27
+ - name: Check project packages for deprecated
28
+ run: yarn npm audit --all --severity moderate
29
30
+ - name: Check all packages for vulnerabilities
31
+ run: yarn npm audit --all --recursive --severity high
0 commit comments