entrouvert
/
godo.js
16
1
Fork 0
Code Issues Pull Requests 2 Releases Wiki Activity

build: only report npm audit high vulnerabilities in production dependencies (#89480) #27

Open
csechet wants to merge 1 commits from wip/89480-npm-audit-casse-build into main
pull from: wip/89480-npm-audit-casse-build
merge into: entrouvert:main
Conversation 0 Commits 1 Files Changed 1 +2 -2
csechet commented 2024-04-26 10:42:04 +02:00
Owner
Copy Link

C.F https://overreacted.io/npm-audit-broken-by-design/

npm clean-install lance npm audit : comme npm audit est déjà lancé dans le Makefile, je l'ai désactivé à ce moment-là.

La solution proposée : on ne fait un audit que sur les dépendances de production et avec une gravité haute pendant le build Jenkins, ça permettra de moins souvent se retrouver avec le build qui casse.

C.F https://overreacted.io/npm-audit-broken-by-design/ npm clean-install lance npm audit : comme npm audit est déjà lancé dans le Makefile, je l'ai désactivé à ce moment-là. La solution proposée : on ne fait un audit que sur les dépendances de production et avec une gravité haute pendant le build Jenkins, ça permettra de moins souvent se retrouver avec le build qui casse.
csechet added 1 commit 2024-04-26 10:42:04 +02:00
All checks were successful
gitea/godo.js/pipeline/head This commit looks good
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
You can also view command line instructions.

Step 1:

From your project repository, check out a new branch and test the changes.
git checkout -b wip/89480-npm-audit-casse-build main
git pull origin wip/89480-npm-audit-casse-build

Step 2:

Merge the changes and update on Gitea.
git checkout main
git merge --no-ff wip/89480-npm-audit-casse-build
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: entrouvert/godo.js#27
No description provided.
Delete Branch "wip/89480-npm-audit-casse-build"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?