New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@quinnturner/audit-ci-codemod

Package Overview
Dependencies
Maintainers
1
Versions
3
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@quinnturner/audit-ci-codemod

Helps migrate audit-ci configurations

1.0.2
latest
Source
npm
Version published
Weekly downloads
0
-100%
Maintainers
1
Weekly downloads
 
Created
Source

audit-ci-codemod

Ensure that your audit-ci config is up to date with a codemod!

npx @quinnturner/audit-ci-codemod

Examples

{
  // This is a comment, whoa
  "low": true,
  "advisories": [1064917],
  "whitelist": ["axios"],
  "path-whitelist": ["1064664|axios>follow-redirects"],
  "allowlist": [
    // GHSA-74fj-2j2h-c42q
    "1064664|github-build>axios>follow-redirects",
    1064664,
    // GHSA-4w2v-q235-vp99
    1065494,
    "1065494|axios",
    "1065494|github-build>axios",
    // GHSA-cph5-m8f7-6c5x
    "1064917|axios",
    "1064917|github-build>axios",
    // Others to ensure modules and wildcards are supported
    "github-build",
    "*|jest"
  ]
}

Turns into

{
  // This is a comment, whoa
  "low": true,
  "allowlist": [
    // GHSA-74fj-2j2h-c42q
    "GHSA-74fj-2j2h-c42q|github-build>axios>follow-redirects",
    "GHSA-74fj-2j2h-c42q",
    // GHSA-4w2v-q235-vp99
    "GHSA-4w2v-q235-vp99",
    "GHSA-4w2v-q235-vp99|axios",
    "GHSA-4w2v-q235-vp99|github-build>axios",
    // GHSA-cph5-m8f7-6c5x
    "GHSA-cph5-m8f7-6c5x|axios",
    "GHSA-cph5-m8f7-6c5x|github-build>axios",
    // Others to ensure modules and wildcards are supported
    "github-build",
    "*|jest",
    "GHSA-cph5-m8f7-6c5x",
    "axios",
    "GHSA-74fj-2j2h-c42q|axios>follow-redirects"
  ]
}

Keywords

audit-ci

FAQs

Package last updated on 12 Mar 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts