diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 722f029a..b3139e7f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -93,7 +93,7 @@ jobs: deno-version: v2.x - name: Scan for known vulnerabilities - run: deno run --allow-read --allow-net=api.osv.dev --allow-env=GITHUB_STEP_SUMMARY --allow-write scripts/audit_deps.ts + run: deno task audit - name: Check for outdated dependencies run: | diff --git a/deno.json b/deno.json index c7fdde76..16a87475 100644 --- a/deno.json +++ b/deno.json @@ -12,7 +12,7 @@ "fmt": "deno fmt", "compile": "deno run -A scripts/compile.ts", "license-headers": "deno run --allow-read --allow-write scripts/add_license_headers.ts", - "audit": "deno run --allow-read --allow-net=api.osv.dev scripts/audit_deps.ts && deno outdated", + "audit": "deno run --allow-read --allow-net=api.osv.dev --allow-env=GITHUB_STEP_SUMMARY --allow-write scripts/audit_deps.ts", "audit-actions": "deno run --allow-read --allow-net=api.github.com --allow-env=GITHUB_STEP_SUMMARY,GITHUB_TOKEN --allow-write scripts/audit_actions.ts", "review-skills": "deno run --allow-read --allow-run --allow-env=GITHUB_STEP_SUMMARY --allow-write scripts/review_skills.ts", "eval-skill-triggers": "deno run --allow-read --allow-run --allow-env --allow-write scripts/eval_skill_triggers_promptfoo.ts"