You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: .github/workflows/release.yml
+3-1Lines changed: 3 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -23,7 +23,9 @@ jobs:
23
23
registry-url: "https://registry.npmjs.org"
24
24
- run: npm ci
25
25
- run: npm run build
26
-
- run: npm audit signatures --omit=dev # --omit-dev because of axios vulneraiblity used by wasm-pack, not in prod, vulnerability is active only when user input is provided
26
+
- run: npm audit --omit=dev
27
+
# once we install dependency we cna change it to "npm audit signatures" to verify signatures as well
28
+
# --omit-dev because of axios vulneraiblity used by wasm-pack, not in prod, vulnerability is active only when user input is provided
0 commit comments