Merge pull request #148 from freespek/igor/npm-audit

add an npm audit workflow

.github/workflows/audit.yml

@@ -0,0 +1,27 @@
+name: npm audit
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+# on:
+#   schedule:
+#     - cron: '0 10 * * *'
+
+jobs:
+  scan:
+    name: npm audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: install dependencies
+        run: cd solarkraft && npm ci
+      - uses: oke-py/npm-audit-action@v2
+        with:
+          audit_level: moderate
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          issue_assignees: thpani
+          issue_labels: vulnerability,test
+          dedupe_issues: true
+          working_directory: solarkraft