Skip to content

Commit fcd9762

Browse files
committed
Audit npm shrinkwrap as well
1 parent f1b83d5 commit fcd9762

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

.github/workflows/security.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,10 +47,14 @@ jobs:
4747
if: steps.cache-yarn.outputs.cache-hit != 'true'
4848
run: SKIP_SUBMODULE_DEPS=1 yarn --frozen-lockfile
4949

50-
- name: Audit for vulnerabilities
50+
- name: Audit yarn for vulnerabilities
5151
run: yarn _audit
5252
if: success()
5353

54+
- name: Audit npm for vulnerabilities
55+
run: npm shrinkwrap && npm audit
56+
if: success()
57+
5458
trivy-scan-repo:
5559
name: Scan repo with Trivy
5660
permissions:

0 commit comments

Comments
 (0)