feat(repo): add npm audit report on ci

It will fail only if critical vulnerabilities are found.
nrwl · Feb 22, 2021 · 9275d1c · 9275d1c
1 parent aa311fa
commit 9275d1c
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/.github/workflows/npm-audit.yml b/.github/workflows/npm-audit.yml
@@ -0,0 +1,15 @@
+name: NPM Audit
+
+on:
+  schedule:
+  - cron: "0 0 * * *"
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v2
+
+    - name: Run a security audit
+      run: npx audit-ci --critical --report-type summary