Skip to content
This repository was archived by the owner on Sep 16, 2026. It is now read-only.

fix(deps): clear high advisories and gate on audit #36

Merged
altaywtf merged 1 commit into from
Sep 12, 2026
Merged

fix(deps): clear high advisories and gate on audit #36

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .github/workflows/verify.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,8 @@ jobs:
run-install: |
- args: ["--frozen-lockfile"]

- run: pnpm run audit

- name: Restore Vite Task cache
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with:
Expand Down
3 changes: 2 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,8 @@
"description": "Self-hosted Cloudflare kit for PR/validation media uploads",
"type": "module",
"scripts": {
"verify": "vp run ready",
"verify": "pnpm run audit && vp run ready",

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Route the validation script through the audited verify command

When contributors use the documented canonical ./scripts/verify.sh entry point, the new audit is skipped because that script still invokes pnpm exec vp run ready directly (scripts/verify.sh:8), despite CONTRIBUTING.md:15-17 describing it as equivalent to pnpm run verify. Route the script through this package command or add the audit there so local validation actually gains the intended high-advisory gate.

AGENTS.md reference: AGENTS.md:L39-L40

Useful? React with 👍 / 👎.

"audit": "pnpm audit --audit-level high",
"check": "vp run checks",
"test": "vp run tests",
"build": "vp run builds",
Expand Down
Loading