npm-audit-frontend.yaml

name: NPM Audit - Frontend

on:
  pull_request:
    branches:
      - main

jobs:
  scan:
    name: npm audit
    runs-on: ubuntu-latest
    steps:
      # Checkout Repository
      - uses: actions/checkout@v3

      # Install Frontend Dependencies
      - name: install dependencies
        run: |
          cd src/frontend/
          npm ci

      # Checkout for moderate or higher vulnerabilities in Frontend package.json
      - uses: oke-py/npm-audit-action@v2
        with:
          audit_level: high
          github_token: ${{ secrets.GITHUB_TOKEN }}
          working_directory: src/frontend