diff options
| -rw-r--r-- | .github/workflows/audit.yml | 2 | ||||
| -rw-r--r-- | scripts/template-oss/audit.yml | 13 | ||||
| -rw-r--r-- | scripts/template-oss/root.js | 1 |
3 files changed, 15 insertions, 1 deletions
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 281331a54..b3f3b982b 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -31,4 +31,4 @@ jobs: - name: Reset Deps run: node . run resetdeps -- --package-lock - name: Run Audit - run: node . audit + run: node . audit -iwr -w workspaces diff --git a/scripts/template-oss/audit.yml b/scripts/template-oss/audit.yml new file mode 100644 index 000000000..3859c5e3d --- /dev/null +++ b/scripts/template-oss/audit.yml @@ -0,0 +1,13 @@ +name: Audit + +on: + workflow_dispatch: + schedule: + # "At 08:00 UTC (01:00 PT) on Monday" https://crontab.guru/#0_8_*_*_1 + - cron: "0 8 * * 1" + +jobs: + audit: + {{> job jobName="Audit Dependencies" jobDepFlags="--package-lock" }} + - name: Run Audit + run: {{ rootNpmPath }} audit -iwr -w workspaces diff --git a/scripts/template-oss/root.js b/scripts/template-oss/root.js index a3b960db0..13bd4c5fa 100644 --- a/scripts/template-oss/root.js +++ b/scripts/template-oss/root.js @@ -7,6 +7,7 @@ module.exports = { '.github/workflows/ci-release.yml': 'ci-release.yml', '.github/dependabot.yml': false, '.github/workflows/post-dependabot.yml': false, + '.github/workflows/audit.yml': 'audit.yml', }, }, workspaceRepo: { |