Paladox has uploaded a new change for review.
https://gerrit.wikimedia.org/r/278571
Change subject: Check for vulnerable libraries in all node.js repos
......................................................................
Check for vulnerable libraries in all node.js repos
Bug: T96078
Change-Id: If6211a6d8b1bd35de8937cb313c2ed6496d1670c
---
M jjb/job-templates.yaml
M jjb/macro.yaml
2 files changed, 4 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/integration/config
refs/changes/71/278571/1
diff --git a/jjb/job-templates.yaml b/jjb/job-templates.yaml
index f316877..4c57c6b 100644
--- a/jjb/job-templates.yaml
+++ b/jjb/job-templates.yaml
@@ -118,7 +118,9 @@
node --version
npm --version
+ npm install nsp
npm install
+ nsp check
npm test
publishers:
- archive-log-allow-empty
diff --git a/jjb/macro.yaml b/jjb/macro.yaml
index fbc4fcd..55d96c6 100644
--- a/jjb/macro.yaml
+++ b/jjb/macro.yaml
@@ -60,7 +60,9 @@
node --version
npm --version
rm -rf node_modules
+ npm install nsp
npm install
+ nsp check
npm test
# The npm-run-* macros are intended to be used when multiple are used
--
To view, visit https://gerrit.wikimedia.org/r/278571
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: If6211a6d8b1bd35de8937cb313c2ed6496d1670c
Gerrit-PatchSet: 1
Gerrit-Project: integration/config
Gerrit-Branch: master
Gerrit-Owner: Paladox <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
