actions
/
toolkit
mirror of https://github.com/actions/toolkit
1
0
Fork 0
Code

Remove allow-list from audit 

Releases can be made or PRs can be merged even if the workflow is failing
pull/1278/head
Ferenc Hammerl 2023-01-03 13:34:55 +01:00
parent 3d46598e70
commit af2d2ff198
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/audit.yml vendored
View File

@ -32,8 +32,7 @@ jobs:
run: npm run bootstrap run: npm run bootstrap
- name: audit tools - name: audit tools
# `|| npm audit` to pretty-print the output if vulnerabilies are found after filtering. run: npm audit --audit-level=moderate
run: npm audit --audit-level=moderate --json | scripts/audit-allow-list || npm audit --audit-level=moderate
- name: audit packages - name: audit packages
run: npm run audit-all run: npm run audit-all