You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This module is intended to be consumed by your favourite continuous integration tool to
9
-
halt execution if `npm audit`, `yarn audit` or `pnpm audit` finds vulnerabilities at or above the specified
9
+
halt execution if `npm audit`, `yarn audit`, or `pnpm audit` finds vulnerabilities at or above the specified
10
10
threshold while ignoring allowlisted advisories.
11
11
12
12
> Note: Use our [codemod](#codemod) to update to [`audit-ci` v6.0.0](https://github.com/IBM/audit-ci/releases/tag/v6.0.0)
@@ -23,8 +23,9 @@ threshold while ignoring allowlisted advisories.
23
23
- Yarn Classic workspaces does not audit `devDependencies`. See [this issue](https://github.com/yarnpkg/yarn/issues/7047) for more information.
24
24
- Yarn v4 is not supported because it provides similar functionality to `audit-ci`.
25
25
For more information, see the [documentation on `yarn npm audit`](https://yarnpkg.com/cli/npm/audit#options).
26
+
If you'd like `audit-ci` to support Yarn v4, voice your opinion on [this issue](https://github.com/IBM/audit-ci/issues/332).
26
27
- Bun is supported by exporting the `bun.lockb` into a Yarn v1 `yarn.lock` file.
27
-
Accordingly, it requires Yarn v1 to run `audit-ci`and it has the same limitations as Yarn v1.
28
+
Accordingly, auditing a `bun.lockb` file with `audit-ci`requires Yarn v1.
28
29
29
30
## Set up
30
31
@@ -49,7 +50,7 @@ bun install -D audit-ci
49
50
```
50
51
51
52
The next section gives examples using `audit-ci` in various CI environments.
52
-
It assumes that moderate, high, and critical severity vulnerabilities prevent build continuation.
53
+
It assumes moderate, high, and critical severity vulnerabilities prevent build continuation.
53
54
Also, it suppresses an advisory of `axios` and a transitive advisory of `react-scripts`.
0 commit comments