ci: audit check in CI

panva · Apr 4, 2022 · 3adf1a4 · 3adf1a4
1 parent a315ad4
commit 3adf1a4
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -11,6 +11,20 @@ on:
     - cron:  0 10 * * 1-5
 
 jobs:
+  audit:
+    name: NPM Audit (Production)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@master
+      - name: Setup node
+        uses: actions/setup-node@v2
+        with:
+          node-version: 16
+      - name: Install dependencies
+        run: npx panva/npm-install-retry
+      - run: npm audit --production
+
   test:
     name: Node Tests + Coverage
     runs-on: ubuntu-latest
@@ -108,6 +122,7 @@ jobs:
   conformance-suite:
     runs-on: ubuntu-latest
     needs:
+      - audit
       - test
       - electron
       - build-conformance-suite