Resolve vulnerabilities found by npm audit (#846)

2021-06-16 09:20:08 -04:00
parent 11601c0d2d
commit 9167ce1f3a
3 changed files with 102 additions and 12 deletions
@@ -31,8 +31,9 @@ jobs:
    - name: Bootstrap
      run: npm run bootstrap

-    - name: audit tools #disabled while we wait for https://github.com/actions/toolkit/issues/539
-      run: npm audit --audit-level=moderate
+    - name: audit tools
+      # `|| npm audit` to pretty-print the output if vulnerabilies are found after filtering.
+      run: npm audit --audit-level=moderate --json | scripts/audit-allow-list || npm audit --audit-level=moderate

    - name: audit packages
      run: npm run audit-all