mirror of
https://github.com/Jeuners/ECC.git
synced 2026-09-09 15:02:30 +02:00
security: add supply-chain IOC scanner (#1904)
This commit is contained in:
parent
0e66c838c7
commit
7d15a2282b
7 changed files with 562 additions and 11 deletions
7
.github/workflows/ci.yml
vendored
7
.github/workflows/ci.yml
vendored
|
|
@ -242,11 +242,16 @@ jobs:
|
|||
with:
|
||||
node-version: '20.x'
|
||||
|
||||
- name: Install audit dependencies
|
||||
run: npm ci --ignore-scripts
|
||||
|
||||
- name: Run npm audit
|
||||
run: |
|
||||
npm audit signatures
|
||||
npm audit --audit-level=high
|
||||
continue-on-error: true # Allows PR to proceed, but marks job as failed if vulnerabilities found
|
||||
|
||||
- name: Run supply-chain IOC scan
|
||||
run: npm run security:ioc-scan
|
||||
|
||||
lint:
|
||||
name: Lint
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue