scheduled pnpm audit #88
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: scheduled pnpm audit | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| issues: write | |
| on: | |
| schedule: | |
| - cron: '0 10 * * *' | |
| # Allows you to run this workflow manually from the Actions tab | |
| workflow_dispatch: | |
| jobs: | |
| scan: | |
| name: pnpm audit | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| # See supported Node.js release schedule at https://nodejs.org/en/about/releases/ | |
| node-version: [20.x] | |
| steps: | |
| - name: SETUP - Checkout | |
| uses: actions/checkout@v4 | |
| # https://github.com/pnpm/action-setup | |
| - name: SETUP - Install pnpm | |
| uses: pnpm/action-setup@v4 | |
| with: | |
| run_install: false | |
| - name: SETUP - Install Node.js ${{ matrix.node-version }} | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'pnpm' | |
| cache-dependency-path: pnpm-lock.yaml | |
| - name: SETUP - Install dependencies | |
| run: | | |
| echo "Installing dependencies..." | |
| pnpm install --frozen-lockfile | |
| - name: CHECK - Check for outdated dependencies (non-blocking warning) | |
| run: | | |
| echo "🔍 Checking for outdated dependencies..." | |
| if pnpm outdated; then | |
| echo "::notice title=Deps OK::✅ Dependencies are up to date 🎉" | |
| else | |
| echo "::warning title=Outdated Dependencies::Some dependencies are outdated. Please consider updating them." | |
| fi | |
| - name: CHECK - Run pnpm audit | |
| run: pnpm audit --json # --audit-level moderate |