Files
maven-settings-action/.github/workflows/audit.yml
dependabot[bot] 7ea3acccf3 Bump actions/checkout from 2.3.5 to 2.4.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-03 10:04:54 +01:00

29 lines
485 B
YAML

name: Audit
on:
pull_request:
push:
branches-ignore:
- 'dependabot/**'
schedule:
- cron: '09 22 * * *'
jobs:
audit:
name: Audit
strategy:
matrix:
os: [ubuntu-latest, windows-latest, macOS-latest]
fail-fast: false
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v2.4.0
- uses: actions/setup-node@v2.4.1
with:
node-version: '12.x'
- run: npm version
- run: npm ci
- run: npm audit