Updated CI

2026-09-30 03:01:21 +02:00 · 2026-02-20 19:18:59 +01:00
parent 63efc2281d
commit fea89a7ece
1 changed files with 3 additions and 3 deletions
@@ -152,9 +152,9 @@ jobs:
      - name: Run npm audit
        working-directory: frontend
        run: |
-          # Only fail on fixable high/critical vulnerabilities.
-          # Unfixable issues (e.g. npm's bundled tar) are tracked via security.yml.
-          npm audit --json > /tmp/audit.json 2>/dev/null || true
+          # Only audit production dependencies — dev dependency vulnerabilities
+          # don't affect end users. Detailed audits are handled by security.yml.
+          npm audit --omit=dev --json > /tmp/audit.json 2>/dev/null || true
          python3 -c "
          import json, sys
          data = json.load(open('/tmp/audit.json'))