Skip to content

Commit 8731f31

Browse files
committed
ci: add npm audit to the publish workflow
1 parent bec843e commit 8731f31

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

.github/workflows/npmpublish.yml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,12 @@ jobs:
1717
- uses: actions/setup-node@v4
1818
with:
1919
node-version: 22
20-
registry-url: 'https://registry.npmjs.org'
21-
cache: 'npm'
20+
registry-url: "https://registry.npmjs.org"
21+
cache: "npm"
2222
- name: Update npm
2323
run: npm install -g npm@latest
2424
- run: npm ci
25+
- run: npm audit --audit-level=high
2526
- run: npm test
2627

2728
publish-npm:
@@ -32,8 +33,8 @@ jobs:
3233
- uses: actions/setup-node@v4
3334
with:
3435
node-version: 22
35-
registry-url: 'https://registry.npmjs.org'
36-
cache: 'npm'
36+
registry-url: "https://registry.npmjs.org"
37+
cache: "npm"
3738
- name: Update npm
3839
run: npm install -g npm@latest
3940
- run: npm ci

0 commit comments

Comments
 (0)