Files
ArrQueueCleaner/.github/workflows/security.yml
2025-09-02 23:15:13 -05:00

40 lines
749 B
YAML

name: Security
on:
push:
branches: [ main ]
paths:
- 'src/**'
- 'package.json'
- 'pnpm-lock.yaml'
pull_request:
branches: [ main ]
paths:
- 'src/**'
- 'package.json'
- 'pnpm-lock.yaml'
schedule:
- cron: '0 6 * * 1' # Weekly on Mondays
jobs:
dependency-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '22'
- name: Setup pnpm
uses: pnpm/action-setup@v4
with:
version: latest
- name: Install dependencies
run: pnpm install
- name: Run security audit
run: pnpm audit --audit-level moderate