ci: fail npm audit on any vuln, not just high/critical
CI / Go vulnerabilities (push) Successful in 55s
CI / Build & Vet (push) Successful in 1m15s
CI / Frontend build (gate) (push) Successful in 1m21s
CI / Frontend QC (audit) (push) Failing after 40s
CI / Frontend QC (typecheck) (push) Successful in 1m44s
CI / Tests (prod) (push) Successful in 2m5s
CI / Frontend QC (lint) (push) Successful in 3m10s
CI / Tests (dev) (push) Successful in 3m17s
CI / Race (prod) (push) Successful in 3m55s
CI / Race (dev) (push) Successful in 5m44s
CI / Go vulnerabilities (push) Successful in 55s
CI / Build & Vet (push) Successful in 1m15s
CI / Frontend build (gate) (push) Successful in 1m21s
CI / Frontend QC (audit) (push) Failing after 40s
CI / Frontend QC (typecheck) (push) Successful in 1m44s
CI / Tests (prod) (push) Successful in 2m5s
CI / Frontend QC (lint) (push) Successful in 3m10s
CI / Tests (dev) (push) Successful in 3m17s
CI / Race (prod) (push) Successful in 3m55s
CI / Race (dev) (push) Successful in 5m44s
Change audit-level from high to info so low and moderate findings also fail the CI step. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
@@ -277,7 +277,7 @@ jobs:
|
||||
- task: lint
|
||||
cmd: npm run lint
|
||||
- task: audit
|
||||
cmd: npm audit --audit-level=high
|
||||
cmd: npm audit --audit-level=info
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
|
||||
Reference in New Issue
Block a user