security: add supply-chain IOC scanner (#1904)

This commit is contained in:
Affaan Mustafa 2026-05-14 21:15:35 -04:00 committed by GitHub
parent 0e66c838c7
commit 7d15a2282b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 562 additions and 11 deletions

View file

@ -242,11 +242,16 @@ jobs:
with:
node-version: '20.x'
- name: Install audit dependencies
run: npm ci --ignore-scripts
- name: Run npm audit
run: |
npm audit signatures
npm audit --audit-level=high
continue-on-error: true # Allows PR to proceed, but marks job as failed if vulnerabilities found
- name: Run supply-chain IOC scan
run: npm run security:ioc-scan
lint:
name: Lint