From a17d6fd2e6a7e1ad0ebaea13b3abf7f09e1964bd Mon Sep 17 00:00:00 2001
From: Stephen Adamson <popertots@gmail.com>
Date: Thu, 9 Jul 2026 17:35:23 +0100
Subject: [PATCH] ci: fail npm audit on any vuln, not just high/critical

Change audit-level from high to info so low and moderate findings also fail the CI step.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
---
 .gitea/workflows/ci.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 9f222ae..8168459 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -277,7 +277,7 @@ jobs:
           - task: lint
             cmd: npm run lint
           - task: audit
-            cmd: npm audit --audit-level=high
+            cmd: npm audit --audit-level=info
     steps:
       - uses: actions/checkout@v4