shumengya
131546b2fe
Some checks failed
CI / build-check-test (push) Has been cancelled
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
623 B
YAML
30 lines
623 B
YAML
name: npm audit
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 22
|
|
cache: npm
|
|
|
|
- name: Install dependencies without lifecycle scripts
|
|
run: npm ci --ignore-scripts --no-audit --no-fund
|
|
|
|
- name: Audit production vulnerabilities
|
|
run: npm audit --omit=dev --audit-level=moderate
|
|
|
|
- name: Verify registry signatures
|
|
run: npm audit signatures --omit=dev
|