jamesrobertwiseman/PNPM Audit
Run PNPM audit on your project and outputs the results as a comment on the PR
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| package_json_path | Folder within which the package.json lives (relative to project root) | yes | ./ |
| github_token | GitHub access token | yes | ${{ github.token }} |
| level | Minimum level of vulnerability to report - low - moderate - high - critical Default: critical | no | critical |
| fails | Fail the build if vulnerabilities are found | no | false |
| single_comment | Edit or remove a single comment instead of posting new ones | no | false |
| inline | Emit vulnerabilities inline in the workflow logs using GitHub annotations | no | false |
| prod | Only audit production dependencies (excludes devDependencies) | no | false |
Outputs
no outputs