AAP-18703: run npm audit on wisdom-service react app (#778)

* AAP-18703: run npm audit on wisdom-service react app * Update dependencies to protect from vulnerabilities
ansible · Jan 10, 2024 · 05475d1 · 05475d1 · github-actions · Jan 10, 2024
1 parent ca70380
commit 05475d1
Show file tree

Hide file tree

Showing 3 changed files with 98 additions and 123 deletions.
diff --git a/.github/workflows/npm_audit.yml b/.github/workflows/npm_audit.yml
@@ -0,0 +1,43 @@
+name: Admin Portal - npm-audit
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - ansible_wisdom_console_react/**
+  pull_request:
+    branches:
+      - main
+    paths:
+      - ansible_wisdom_console_react/**
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    env:
+      WORKING_DIRECTORY: ./ansible_wisdom_console_react
+
+    steps:
+      - name: Checkout commit
+        uses: actions/checkout@v3
+
+      - name: Use Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: '20.x'
+          cache: 'npm'
+          cache-dependency-path: ${{env.WORKING_DIRECTORY}}/package-lock.json
+
+      - name: Install Dependencies
+        run: npm ci
+        working-directory: ${{env.WORKING_DIRECTORY}}
+
+      - name: Run npm audit
+        uses: oke-py/npm-audit-action@v2
+        with:
+          audit_level: low
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          create_issues: false
+          working_directory: ${{env.WORKING_DIRECTORY}}
diff --git a/ansible_wisdom_console_react/package-lock.json b/ansible_wisdom_console_react/package-lock.json
diff --git a/ansible_wisdom_console_react/package.json b/ansible_wisdom_console_react/package.json
@@ -25,9 +25,9 @@
     "@testing-library/user-event": "^14.0.0",
     "@types/react": "^18.2.21",
     "@types/react-dom": "^18.2.7",
+    "@types/react-test-renderer": "^18.0.1",
     "@typescript-eslint/eslint-plugin": "^5.62.0",
     "@typescript-eslint/parser": "^5.0.0",
-    "@types/react-test-renderer": "^18.0.1",
     "axios": "^1.5.0",
     "babel-jest": "^29.7.0",
     "babel-loader": "^8.2.3",
@@ -66,13 +66,13 @@
     "react-dev-utils": "^12.0.1",
     "react-test-renderer": "^18.2.0",
     "resolve": "^1.20.0",
-    "resolve-url-loader": "^4.0.0",
+    "resolve-url-loader": "^5.0.0",
     "sass-loader": "^12.3.0",
     "semver": "^7.5.4",
     "source-map-loader": "^3.0.0",
     "style-loader": "^3.3.1",
-    "tslib": "^2.6.2",
     "ts-jest": "^29.1.1",
+    "tslib": "^2.6.2",
     "typescript": "^5.1.6",
     "webpack": "^5.64.4",
     "webpack-dev-server": "^4.6.0",