add npm audit, remove vulnerable packages

WebOfTrust · Dec 9, 2023 · 400d561 · 400d561
1 parent 858dea2
commit 400d561
Show file tree

Hide file tree

Showing 4 changed files with 842 additions and 6,400 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -73,3 +73,16 @@ jobs:
         run: docker compose logs
         if: always()
 
+  audit:
+    name: Find vulnerabilities
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v2
+
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '18.12.1'
+          cache: 'npm'
+      - name: Run audit
+        run: npm audit