From b4b9d711d5642a1782e199d3deab0775a07badd8 Mon Sep 17 00:00:00 2001
From: kuekhaoyang <kuekhaoyang@Gmail.com>
Date: Sat, 25 Apr 2026 10:58:04 +0800
Subject: [PATCH] ci: gate production audit on high severities

---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 18f1213..02390cf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,8 +48,8 @@ jobs:
       - name: Workers build
         run: npm run cf:build
 
-      - name: Audit production dependencies
-        run: npm audit --omit=dev
+      - name: Audit production dependencies (high severity+)
+        run: npm audit --omit=dev --audit-level=high
 
       - name: Validate docker compose
         run: docker compose config