kazerlelutin
785e1be2aa
CI / quality (push) Waiting to run
CI / e2e-and-a11y (push) Blocked by required conditions
CI / lighthouse (push) Blocked by required conditions
CI / android-smoke (push) Waiting to run
CI / pull-request-report (push) Blocked by required conditions
Security / codeql (push) Waiting to run
Security / deps-and-secrets (push) Waiting to run
23 lines
634 B
YAML
23 lines
634 B
YAML
name: Dependency review
|
||
|
||
on:
|
||
pull_request:
|
||
|
||
permissions:
|
||
contents: read
|
||
|
||
jobs:
|
||
dependency-review:
|
||
runs-on: ubuntu-latest
|
||
steps:
|
||
- uses: actions/checkout@v7
|
||
- uses: actions/setup-node@v7
|
||
with:
|
||
node-version: 22
|
||
cache: npm
|
||
# L’action officielle `dependency-review-action` suppose Dependency graph + GitHub Advanced Security
|
||
# (réglages du dépôt). Sans GHAS elle échoue toujours sur les dépôts non éligibles.
|
||
# Même garde-fou que Security / deps-and-secrets : lockfile installable + npm audit.
|
||
- run: npm ci
|
||
- run: npm audit --audit-level=high
|