Repository navigation
chore(frontend-deps): bump react-dom and @types/react-dom in /frontend #232
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Security Audit | |
| on: | |
| schedule: | |
| - cron: "0 6 * * 1" # Every Monday at 6 AM UTC | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| jobs: | |
| npm-audit-backend: | |
| name: npm audit (Backend) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: "22" | |
| - name: Install backend dependencies | |
| run: npm ci | |
| working-directory: backend | |
| - name: Show full audit report | |
| run: npm audit --json || true | |
| working-directory: backend | |
| - name: Fail on critical vulnerabilities only | |
| # We use 'critical' because some high-severity advisories exist in | |
| # transitive dependencies of @stellar/stellar-sdk with no upstream fix yet. | |
| # Tracked in: https://github.com/thisisouvik/autopilot/issues/10 | |
| run: npm audit --audit-level=critical --omit=dev | |
| working-directory: backend | |
| npm-audit-frontend: | |
| name: npm audit (Frontend) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: "22" | |
| - name: Install frontend dependencies | |
| run: npm ci | |
| working-directory: frontend | |
| - name: Show full audit report | |
| run: npm audit --json || true | |
| working-directory: frontend | |
| - name: Fail on critical vulnerabilities only | |
| # We use 'critical' because some high-severity advisories exist in | |
| # transitive dependencies of @stellar/stellar-sdk with no upstream fix yet. | |
| # Tracked in: https://github.com/thisisouvik/autopilot/issues/10 | |
| run: npm audit --audit-level=critical --omit=dev | |
| working-directory: frontend | |
| cargo-audit: | |
| name: cargo audit (Contracts) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: dtolnay/rust-toolchain@stable | |
| - name: Install cargo-audit | |
| run: cargo install cargo-audit | |
| - name: Audit Rust dependencies | |
| run: cargo audit | |
| working-directory: contracts |