Files
maven-settings-action/.github/workflows/audit.yml
dependabot[bot] e087497fdf Bump actions/setup-node from 2.3.0 to 2.4.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-20 11:49:09 +02:00

29 lines
485 B
YAML

name: Audit
on:
pull_request:
push:
branches-ignore:
- 'dependabot/**'
schedule:
- cron: '09 22 * * *'
jobs:
audit:
name: Audit
strategy:
matrix:
os: [ubuntu-latest, windows-latest, macOS-latest]
fail-fast: false
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v2.3.4
- uses: actions/setup-node@v2.4.0
with:
node-version: '12.x'
- run: npm version
- run: npm ci
- run: npm audit