32 lines
660 B
YAML
32 lines
660 B
YAML
name: npm audit
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '37 7 * * *'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 22
|
|
cache: npm
|
|
|
|
- name: Install dependencies without lifecycle scripts
|
|
run: npm ci --ignore-scripts --no-audit --no-fund
|
|
|
|
- name: Audit production vulnerabilities
|
|
run: npm audit --omit=dev --audit-level=moderate
|
|
|
|
- name: Verify registry signatures
|
|
run: npm audit signatures --omit=dev
|