Dependencies #67
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Public npm dependencies workflow | |
| # ================================ | |
| name: Dependencies | |
| on: | |
| schedule: | |
| - cron: '0 0 * * 1' # Run weekly on Mondays | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| dependencies: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Prepare pre-requisites | |
| uses: ./.github/actions/prepare | |
| - name: Configure npm authentication for npm registry | |
| env: | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| run: | | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| - name: Install dependencies | |
| run: pnpm install | |
| - name: Check for outdated dependencies | |
| run: pnpm outdated | |
| continue-on-error: true | |
| - name: Run security audit | |
| run: pnpm audit | |
| continue-on-error: true |