Skip to content

Commit c57df87

Browse files
authored
Add yarn audit check on github actions (#2441)
Checks for known security issues with the installed packages Signed-off-by: Lenin Alevski <[email protected]> Signed-off-by: Lenin Alevski <[email protected]>
1 parent cbbf3c5 commit c57df87

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

.github/workflows/jobs.yaml

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -284,7 +284,7 @@ jobs:
284284
semgrep --config semgrep.yaml $(pwd)/portal-ui --error
285285
286286
no-warnings-and-make-assets:
287-
name: "React Code Has No Warnings & is Prettified, then Make Assets"
287+
name: "React Code Has No Vulnerabilities, Warnings & is Prettified, then Make Assets"
288288
runs-on: ubuntu-latest
289289
strategy:
290290
matrix:
@@ -333,6 +333,11 @@ jobs:
333333
restore-keys: |
334334
${{ runner.os }}-assets-
335335
336+
- name: Checks for known security issues with the installed packages
337+
working-directory: ./portal-ui
338+
continue-on-error: false
339+
run: |
340+
yarn audit
336341
- name: Install Dependencies
337342
working-directory: ./portal-ui
338343
continue-on-error: false

0 commit comments

Comments
 (0)