Add yarn audit check on github actions (#2441)
Checks for known security issues with the installed packages Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com> Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
This commit is contained in:
7
.github/workflows/jobs.yaml
vendored
7
.github/workflows/jobs.yaml
vendored
@@ -284,7 +284,7 @@ jobs:
|
||||
semgrep --config semgrep.yaml $(pwd)/portal-ui --error
|
||||
|
||||
no-warnings-and-make-assets:
|
||||
name: "React Code Has No Warnings & is Prettified, then Make Assets"
|
||||
name: "React Code Has No Vulnerabilities, Warnings & is Prettified, then Make Assets"
|
||||
runs-on: ubuntu-latest
|
||||
strategy:
|
||||
matrix:
|
||||
@@ -333,6 +333,11 @@ jobs:
|
||||
restore-keys: |
|
||||
${{ runner.os }}-assets-
|
||||
|
||||
- name: Checks for known security issues with the installed packages
|
||||
working-directory: ./portal-ui
|
||||
continue-on-error: false
|
||||
run: |
|
||||
yarn audit
|
||||
- name: Install Dependencies
|
||||
working-directory: ./portal-ui
|
||||
continue-on-error: false
|
||||
|
||||
Reference in New Issue
Block a user