nextcloud / nextcloud/cookbook
Add daily test for NPM security issues
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- HTML
- Stars
- 641
- Forks
- 113
- Avg merge
- 21h 31m
- Merged PRs (30d)
- 26
Description
There should be a github action that daily checks the output of npm audit if there are any security issues/vulnerabilities found.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the repository's existing GitHub Actions workflows and the project's npm configuration, then run npm audit to understand the expected output. Add a daily security check whose result clearly indicates whether vulnerabilities were found; done means the workflow runs on a daily schedule and reports audit failures.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100