chore(deps): Bump the npm-dependencies group in /site with 4 updates … #207

	name: pinprick audit

	on:
	pull_request:
	paths:
	- ".github/workflows/**"
	push:
	branches:
	- main

	concurrency:
	group: "pinprick-audit-${{ github.ref }}"
	cancel-in-progress: true

	permissions: {}

	jobs:
	audit:
	name: Audit
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write # required to upload SARIF results
	steps:
	- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
	with:
	persist-credentials: false

	- name: Install pinprick
	run: /home/linuxbrew/.linuxbrew/bin/brew install starhaven-io/tap/pinprick

	- name: Run pinprick audit
	env:
	GITHUB_TOKEN: ${{ github.token }}
	run: \|
	set +e
	/home/linuxbrew/.linuxbrew/bin/pinprick audit --sarif . > pinprick.sarif
	EXIT=$?
	# 0 = clean, 1 = findings (still upload), 2+ = real error
	if [[ "${EXIT}" -gt 1 ]]; then
	echo "::error::pinprick audit errored with exit code ${EXIT}"
	exit "${EXIT}"
	fi

	- name: Upload SARIF
	uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
	with:
	sarif_file: pinprick.sarif
	category: pinprick

Provide feedback