From ad410bb00d0f1b611cb2623ee9237e6d8a171d49 Mon Sep 17 00:00:00 2001 From: GitHub Status <154859089+GitHub-Status@users.noreply.github.com> Date: Tue, 26 Dec 2023 23:44:47 +0530 Subject: [PATCH] Create security.yml (#7) --- .github/workflows/security.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/security.yml diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml new file mode 100644 index 0000000..47c1758 --- /dev/null +++ b/.github/workflows/security.yml @@ -0,0 +1,29 @@ +name: Security Scan + +on: + pull_request: + branches: + - main + +jobs: + security: + runs-on: ubuntu-latest + + steps: + - name: Checkout Repository + uses: actions/checkout@v2 + + - name: Set Up Node.js + uses: actions/setup-node@v3 + with: + node-version: '14' + + - name: Install Dependencies + run: npm install + + - name: Run Security Checks + run: npm audit + + - name: Check Code for Vulnerabilities + run: npm audit --audit-level=critical +