feat: erweitere OSV-Scanner mit JSON-Ausgabe und kritischen Befunden
All checks were successful
Code Analysis and Production Deploy / analyze (push) Successful in 7m40s
Code Analysis and Production Deploy / deploy-production (push) Has been skipped
Code Analysis and Production Deploy / deploy-test (push) Successful in 3m17s

This commit is contained in:
Torsten Schulz (local)
2026-10-22 23:14:28 +02:00
parent b86555744f
commit 3dc293517f
3 changed files with 30 additions and 2 deletions

View File

@@ -126,7 +126,8 @@ jobs:
chmod +x osv-scanner
./osv-scanner --version
test -f "$GITHUB_WORKSPACE/package-lock.json"
./osv-scanner scan -L "$GITHUB_WORKSPACE/package-lock.json" --config "$GITHUB_WORKSPACE/.osv-scanner.toml"
./osv-scanner scan -L "$GITHUB_WORKSPACE/package-lock.json" --config "$GITHUB_WORKSPACE/.osv-scanner.toml" --format json --output-file osv-report.json || true
node scripts/check-osv-severity.mjs osv-report.json
deploy-production:
runs-on: ubuntu-latest