mirror of
https://github.com/kremalicious/metamask-extension.git
synced 2024-11-23 10:30:04 +01:00
21 lines
725 B
Bash
21 lines
725 B
Bash
|
#!/usr/bin/env bash
|
||
|
|
|
||
|
|
set -u
|
||
|
|
set -o pipefail
|
||
|
|
|
||
|
|
yarn audit --level moderate --groups dependencies
|
||
|
|
audit_status="$?"
|
||
|
|
|
||
|
|
# Use a bitmask to ignore INFO and LOW severity audit results
|
||
|
|
# See here: https://yarnpkg.com/lang/en/docs/cli/audit/
|
||
|
|
audit_status="$(( audit_status & 11100 ))"
|
||
|
|
|
||
|
|
if [[ "$audit_status" != 0 ]]
|
||
|
|
then
|
||
|
|
count="$(yarn audit --level moderate --groups dependencies --json | tail -1 | jq '.data.vulnerabilities.moderate + .data.vulnerabilities.high + .data.vulnerabilities.critical')"
|
||
|
|
printf "Audit shows %s moderate or high severity advisories _in the production dependencies_\n" "$count"
|
||
|
|
exit 1
|
||
|
|
else
|
||
|
|
printf "Audit shows _zero_ moderate or high severity advisories _in the production dependencies_\n"
|
||
|
|
fi
|