Skip to content

Commit 1be7e65

Browse files
committed
Skip installing dependencies in audit
It seems the tools only require the lock files.
1 parent fcd9762 commit 1be7e65

File tree

1 file changed

+1
-14
lines changed

1 file changed

+1
-14
lines changed

.github/workflows/security.yaml

Lines changed: 1 addition & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -34,21 +34,8 @@ jobs:
3434
with:
3535
node-version: "18"
3636

37-
- name: Fetch dependencies from cache
38-
id: cache-yarn
39-
uses: actions/cache@v3
40-
with:
41-
path: "**/node_modules"
42-
key: yarn-build-${{ hashFiles('**/yarn.lock') }}
43-
restore-keys: |
44-
yarn-build-
45-
46-
- name: Install dependencies
47-
if: steps.cache-yarn.outputs.cache-hit != 'true'
48-
run: SKIP_SUBMODULE_DEPS=1 yarn --frozen-lockfile
49-
5037
- name: Audit yarn for vulnerabilities
51-
run: yarn _audit
38+
run: yarn audit
5239
if: success()
5340

5441
- name: Audit npm for vulnerabilities

0 commit comments

Comments
 (0)