ci: add back npm audit

CodeGenieApp · Dec 19, 2023 · e7ed8b1 · e7ed8b1
1 parent 682a4e7
commit e7ed8b1
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/release-on-push-to-mainline.yml b/.github/workflows/release-on-push-to-mainline.yml
@@ -24,11 +24,8 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
 
-      # - name: Audit
-      #   run: npm audit --audit-level critical
-
       # 14.x fails with "npm ERR! Cannot read property '@commitlint/config-conventional' of undefined"
-      # when running npm ci due to the new package-lock.json format.
+      # when running `npm ci` due to the new package-lock.json format. Run `npm i` instead
       - name: Install (14.x)
         if: matrix.node-version == '14.x'
         run: npm i
@@ -48,6 +45,10 @@ jobs:
         if: matrix.node-version == '20.x'
         run: npm run lint
 
+      - name: Audit
+        if: matrix.node-version == '20.x'
+        run: npm audit --audit-level critical
+
       - name: Release
         if: github.event_name == 'push' && github.ref == 'refs/heads/mainline' && matrix.node-version == '20.x'
         run: npm run release