Skip to content

Scheduled Yarn audit #2789

Scheduled Yarn audit

Scheduled Yarn audit #2789

name: Scheduled Yarn audit
on:
schedule:
# Once a day at 5 o-clock
- cron: "0 5 * * *"
push:
branches: [main]
pull_request:
paths:
- ".github/workflows/yarn-audit-scheduled.yml"
defaults:
run:
working-directory: ./frontend
jobs:
audit:
name: Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Setup Node.js environment
uses: actions/setup-node@v3
with:
node-version: "18"
- name: Get yarn cache directory path
id: yarn-cache-dir-path
run: echo "::set-output name=dir::$(yarn config get cacheFolder)"
- uses: actions/cache@v3
id: yarn-cache
with:
path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
restore-keys: |
${{ runner.os }}-yarn-
- name: Install dependencies
run: yarn --prefer-offline --frozen-lockfile --check-files
- name: Run audit
run: yarn audit-ci --config audit-ci.jsonc