Skip to content

Commit f7bb23e

Browse files
committed
chore: Fail CI on critical npm deps
1 parent 43536f4 commit f7bb23e

File tree

3 files changed

+22
-5
lines changed

3 files changed

+22
-5
lines changed

.github/workflows/cdk-checks.yml

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,11 +48,18 @@ jobs:
4848
run: npm install -g aws-cdk
4949

5050
- name: Build and link local package
51-
run: npm ci && npm run build && npm link
51+
run: |
52+
npm ci
53+
npm audit --audit-level critical
54+
npm run build
55+
npm link
5256
working-directory: ./src/typescript
5357

5458
- name: Install dependencies
55-
run: npm ci && npm link @aws/run-mcp-servers-with-aws-lambda
59+
run: |
60+
npm ci
61+
npm audit --audit-level critical
62+
npm link @aws/run-mcp-servers-with-aws-lambda
5663
working-directory: ./examples/servers/weather-alerts
5764

5865
- name: Build

.github/workflows/release.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -178,6 +178,7 @@ jobs:
178178
run: |
179179
cp ../../README.md .
180180
npm ci
181+
npm audit --audit-level critical
181182
npm publish --access public
182183
env:
183184
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/typescript-checks.yml

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,9 @@ jobs:
1616
node-version: 20
1717

1818
- name: Install dependencies
19-
run: npm ci
19+
run: |
20+
npm ci
21+
npm audit --audit-level critical
2022
working-directory: ./src/typescript
2123

2224
- name: Build
@@ -43,11 +45,18 @@ jobs:
4345
node-version: 20
4446

4547
- name: Build and link local package
46-
run: npm ci && npm run build && npm link
48+
run: |
49+
npm ci
50+
npm audit --audit-level critical
51+
npm run build
52+
npm link
4753
working-directory: ./src/typescript
4854

4955
- name: Install dependencies
50-
run: npm ci && npm link @aws/run-mcp-servers-with-aws-lambda
56+
run: |
57+
npm ci
58+
npm audit --audit-level critical
59+
npm link @aws/run-mcp-servers-with-aws-lambda
5160
working-directory: ./examples/chatbots/typescript
5261

5362
- name: Build

0 commit comments

Comments
 (0)