From a6ce94a21e31994d23b3b2f37091099150ddf1ba Mon Sep 17 00:00:00 2001 From: Shyngys Shynbolatov Date: Fri, 16 Oct 2026 17:41:23 +0600 Subject: [PATCH] ci: add npmscan-action for dependency security --- .github/workflows/npmscan.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/npmscan.yml diff --git a/.github/workflows/npmscan.yml b/.github/workflows/npmscan.yml new file mode 100644 index 0000000000..3d355a527b --- /dev/null +++ b/.github/workflows/npmscan.yml @@ -0,0 +1,22 @@ +name: NPMscan + +on: + pull_request: + types: [opened, synchronize, reopened] + +permissions: + contents: read + pull-requests: write + +jobs: + npmscan: + name: Dependency Security Scan + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: Run NPMscan + uses: NPMscan/npmscan-action@de14168f65640a4ed1f0e82ad3ad8c80483d360d + with: + file: package-lock.json + mode: warn + fail-on-error: false