From a4389e089eeca5e030a47f9fa233ebb632c696e2 Mon Sep 17 00:00:00 2001 From: Joel Collins <2579603-jtc42@users.noreply.gitlab.com> Date: Tue, 15 Oct 2019 10:32:57 +0000 Subject: [PATCH] Change dependency scanning to plain npm audit --- .gitlab-ci.yml | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 5212715c..b0266a59 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -13,14 +13,20 @@ cache: paths: - node_modules/ -dependency_scanning: + +# Check for dependency vulnerabilities +audit: stage: test - variables: - CI_DEBUG_TRACE: "true" - DOCKER_DRIVER: overlay2 - - services: - - docker:19.03.3-dind + image: electronuserland/builder:wine + + script: + - npm audit --json> audit.json + + allow_failure: true + + artifacts: + paths: + - "./audit.json" # Electron app build