ci(workflows): temporarily ignore zod email vulnerability until patch…

… available
code-pushup · Oct 3, 2023 · 8b16a35 · 8b16a35
1 parent 8b13039
commit 8b16a35
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -18,7 +18,8 @@ jobs:
           node-version: 18
           cache: npm
       - name: Audit production dependencies
-        run: npm audit --omit=dev --omit=optional
+        # remove audit-level filter once patch is available for https://github.com/advisories/GHSA-m95q-7qp3-xv42
+        run: npm audit --omit=dev --omit=optional --audit-level=moderate
 
   format:
     runs-on: ubuntu-latest