-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix: fix package security and remove packagen no use
- Loading branch information
1 parent
abab183
commit d115c96
Showing
14 changed files
with
5,356 additions
and
12,487 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,19 @@ | ||
Closes # <!-- addressed issue --> | ||
Closes # | ||
|
||
<!-- addressed issue --> | ||
|
||
## 📑 Description | ||
|
||
<!-- describe root cause analysis --> | ||
|
||
## ✅ Checks | ||
|
||
- [ ] My pull request adheres to the code style of this project | ||
- [ ] My code requires changes to the documentation | ||
- [ ] I have updated the documentation as required | ||
- [ ] All the tests have passed | ||
- [ ] My pull request adheres to the code style of this project | ||
- [ ] My code requires changes to the documentation | ||
- [ ] I have updated the documentation as required | ||
- [ ] All the tests have passed | ||
- [ ] The dependencies in `package.json` are correct and necessary (no unused or missing packag | ||
|
||
## ℹ Additional Information | ||
|
||
<!-- adding more information --> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,46 @@ | ||
name: 'Package Audit' | ||
on: | ||
pull_request: | ||
branches: | ||
- main | ||
paths: | ||
- '**/package.json' | ||
- '**/pnpm-lock.yaml' | ||
|
||
jobs: | ||
audit: | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Checkout repository | ||
uses: actions/checkout@v4 | ||
|
||
- name: Set up Node.js | ||
uses: actions/setup-node@v4 | ||
with: | ||
node-version: 20 | ||
|
||
- name: Install pnpm | ||
run: npm install -g pnpm | ||
|
||
- name: Set up PNPM_HOME and PATH | ||
run: | | ||
echo "PNPM_HOME=$HOME/.local/share/pnpm" >> $GITHUB_ENV | ||
echo "PATH=$HOME/.local/share/pnpm:$PATH" >> $GITHUB_ENV | ||
mkdir -p $HOME/.local/share/pnpm | ||
export PNPM_HOME=$HOME/.local/share/pnpm | ||
export PATH=$PNPM_HOME:$PATH | ||
- name: Install dependencies | ||
run: pnpm install --no-frozen-lockfile | ||
|
||
- name: Run pnpm audit | ||
id: audit | ||
run: | | ||
result=$(pnpm audit --json) | ||
echo "Audit result: $result" | ||
echo "$result" > audit-result.json | ||
if echo "$result" | grep -q '"advisory"'; then | ||
echo "Vulnerabilities found" | ||
exit 1 | ||
else | ||
echo "No vulnerabilities found." | ||
fi |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.