add audit-ci to ignore allowlist audit vulns

decentralized-identity · Aug 23, 2024 · be042e6 · be042e6
1 parent 84ca7e7
commit be042e6
Show file tree

Hide file tree

Showing 4 changed files with 193 additions and 25 deletions.
diff --git a/.github/workflows/integrity-check.yml b/.github/workflows/integrity-check.yml
@@ -29,7 +29,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 18.17.0
-      - run: npm audit
+      - run: pnpm run audit-ci
 
   test-with-node:
     runs-on: ubuntu-latest

diff --git a/audit-ci.json b/audit-ci.json
@@ -0,0 +1,7 @@
+{
+  "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
+  "moderate": true,
+  "allowlist": [
+    "GHSA-952p-6rrq-rcjv"
+  ]
+}