Skip to content

Commit a1f3a23

Browse files
feat(ci): add checking packages for vulnerabilities (#166)
Towards #161
1 parent 5eb0255 commit a1f3a23

File tree

1 file changed

+31
-0
lines changed

1 file changed

+31
-0
lines changed

.github/workflows/security.yml

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
name: Security checks
2+
on:
3+
pull_request:
4+
push:
5+
branches:
6+
- main
7+
8+
jobs:
9+
security:
10+
runs-on: ubuntu-latest
11+
steps:
12+
- name: Fetch Sources
13+
uses: actions/checkout@v4
14+
15+
- name: Enable Corepack
16+
run: corepack enable
17+
18+
- name: Setup Node.js 22.x
19+
uses: actions/setup-node@v4
20+
with:
21+
node-version: 22.x
22+
cache: "yarn"
23+
24+
- name: Install dependencies
25+
run: yarn install --immutable --check-cache --check-resolutions
26+
27+
- name: Check project packages for deprecated
28+
run: yarn npm audit --all --severity moderate
29+
30+
- name: Check all packages for vulnerabilities
31+
run: yarn npm audit --all --recursive --severity high

0 commit comments

Comments
 (0)