ci(frontend): add npm audit workflow

- Create 'frontend-audit.yaml' to fail on high-severity vulnerabilities
- Integrate audit job into main 'frontend-ci.yaml'

Signed-off-by: Davide Briani <davide.briani@secomind.com>

Author: davidebriani

.github/workflows/frontend-audit.yaml

@@ -0,0 +1,24 @@
+name: NPM Audit
+on:
+  workflow_call:
+  workflow_dispatch:
+permissions:
+  contents: read
+defaults:
+  run:
+    shell: bash
+    working-directory: frontend
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: .tool-versions
+          cache: "npm"
+          cache-dependency-path: frontend/package-lock.json
+      - name: npm install
+        run: npm ci --ignore-scripts
+      - name: npm audit
+        run: npm audit --audit-level=high

.github/workflows/frontend-ci.yaml

@@ -62,3 +62,6 @@ jobs:
   coverage:
     needs: [warmup-cache]
     uses: ./.github/workflows/frontend-coverage.yaml
+  audit:
+    needs: [warmup-cache]
+    uses: ./.github/workflows/frontend-audit.yaml