From 881c3ea6c6f3c5f2021cbfecb8dc073135aa860a Mon Sep 17 00:00:00 2001 From: Jason Frey Date: Wed, 1 Apr 2026 09:51:25 -0400 Subject: [PATCH] Add an npm audit security check into CI Signed-off-by: Jason Frey --- .github/workflows/test.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index bf91b37..d459f51 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -358,3 +358,14 @@ jobs: - run: npm run package - name: Check dist directory is up to date run: git diff --exit-code + + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v6 + - name: Set up Node.js + uses: actions/setup-node@v6 + with: + node-version: 24 + package-manager-cache: false + - run: npm audit