Skip to content

Commit 9b5f081

Browse files
authored
fix: remove signature verification, since there is no deps to verify
1 parent fbafd77 commit 9b5f081

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

.github/workflows/release.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,9 @@ jobs:
2323
registry-url: "https://registry.npmjs.org"
2424
- run: npm ci
2525
- run: npm run build
26-
- run: npm audit signatures --omit=dev # --omit-dev because of axios vulneraiblity used by wasm-pack, not in prod, vulnerability is active only when user input is provided
26+
- run: npm audit --omit=dev
27+
# once we install dependency we cna change it to "npm audit signatures" to verify signatures as well
28+
# --omit-dev because of axios vulneraiblity used by wasm-pack, not in prod, vulnerability is active only when user input is provided
2729
- name: Release
2830
env:
2931
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)