ci: gate production audit on high severities

2026-08-17 17:53:43 +08:00 · 2026-04-25 10:58:04 +08:00
parent c1331071ac
commit b4b9d711d5
1 changed files with 2 additions and 2 deletions
@@ -48,8 +48,8 @@ jobs:
      - name: Workers build
        run: npm run cf:build

-      - name: Audit production dependencies
-        run: npm audit --omit=dev
+      - name: Audit production dependencies (high severity+)
+        run: npm audit --omit=dev --audit-level=high

      - name: Validate docker compose
        run: docker compose config