audit.yml

name: audit npm dependencies 
on:
  push:
    branches: [ main, master ]
  pull_request:
    branches: [ main, master ]
jobs:
  test:
    timeout-minutes: 60
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-node@v4
      with:
        node-version: lts/*
    - name: Bootstrap env variables
      env:
        DATABASE_URL: "file:./evolver.db"
        DEFAULT_DEVICE_PORT: 8080
      run: echo "DATABASE_URL=$DATABASE_URL" >> .env && echo "DEFAULT_DEVICE_PORT=$DEFAULT_DEVICE_PORT" >> .env
    - name: Install all dependencies including dev dependencies
      run: npm ci --include=dev && npm run bootstrap_dev_db && npm run bootstrap_evolver_ts_client
    - name: audit
      run: npm audit --json > audit.json
    - name: audit signatures
      run: npm audit signatures
    - uses: actions/upload-artifact@v4
      if: always()
      with:
        name: audit-report 
        path: audit.json
        retention-days: 30