chore(ci): add audit-ci config path for allowlist support
Add --config ./audit-ci.jsonc to audit-ci step so plugin repos can provide their own allowlist for inherited @kinvolk/headlamp-plugin dev-dependency CVEs (CTO decision PRI-854). Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
@@ -173,7 +173,7 @@ jobs:
|
||||
- name: Security audit
|
||||
run: |
|
||||
if [ "${{ steps.pkg-manager.outputs.manager }}" = "pnpm" ]; then
|
||||
npx audit-ci --pnpm --audit-level=high
|
||||
npx audit-ci --pnpm --audit-level=high --config ./audit-ci.jsonc
|
||||
else
|
||||
npx audit-ci --npm --audit-level=high
|
||||
npx audit-ci --npm --audit-level=high --config ./audit-ci.jsonc
|
||||
fi
|
||||
Reference in New Issue
Block a user