mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 01:18:42 +00:00
Add malicious package checking (Shai-Halud only) to website CI/CD test script (#36438)
This commit is contained in:
parent
ec71fb814e
commit
c0b3517f75
1 changed files with 8 additions and 0 deletions
8
.github/workflows/test-website.yml
vendored
8
.github/workflows/test-website.yml
vendored
|
|
@ -66,5 +66,13 @@ jobs:
|
|||
# Run sanity checks
|
||||
- run: cd website/ && npm test
|
||||
|
||||
# Scan for malicious packages
|
||||
# - name: Security Scan with Shai-Hulud Detector
|
||||
# run: |
|
||||
# git clone https://github.com/Cobenian/shai-hulud-detect
|
||||
# cd shai-hulud-detect
|
||||
# chmod +x shai-hulud-detector.sh
|
||||
# # ./shai-hulud-detector.sh --paranoid ../ # Pipeline will automatically fail on exit codes 1 or 2
|
||||
|
||||
# Compile assets
|
||||
- run: cd website/ && BUILD_SCRIPT_ARGS="--githubAccessToken=${{ secrets.FLEET_GITHUB_TOKEN_FOR_WEBSITE_TEST }}" npm run build-for-prod
|
||||
|
|
|
|||
Loading…
Reference in a new issue