awslabs / awslabs/simple-code-scanning-pipeline
Add Npm-Audit action
Open
- Dominant language
- TypeScript
- Stars
- 19
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
https://docs.npmjs.com/cli/v8/commands/npm-audit
checks for vulnerabilities in Javascript and NodeJS.
Contributor guide
Research direction
Read the linked npm audit documentation, then inspect the repository's existing code-scanning pipeline actions. Determine how the new action should run npm audit for JavaScript and Node.js projects; done means the pipeline checks for vulnerabilities.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript, node.js
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100