Hartmut
7da89541b1
CI / Architecture Guardrails (push) Successful in 3m35s
CI / Assistant Split Regression (push) Successful in 4m38s
CI / Lint (push) Successful in 4m57s
CI / Typecheck (push) Successful in 5m3s
CI / Unit Tests (push) Failing after 6m3s
CI / Build (push) Failing after 4m42s
CI / E2E Tests (push) Has been skipped
CI / Fresh-Linux Docker Deploy (push) Has been skipped
CI / Release Images (push) Has been skipped
On the self-hosted QNAP runner, restoring the pnpm store from actions/cache produces ~260 "Cannot change mode to rwxr-xr-x: Bad address" tar errors, leaving the store partially extracted. pnpm install still reports success but produces broken symlinks (e.g. @vitest/coverage-v8 missing at runtime), which crashes the engine test suite with ERR_LOAD_URL. QNAP runner disk persists across runs anyway; the cache layer only adds risk.
34 lines
642 B
YAML
34 lines
642 B
YAML
name: Nightly Security
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "17 2 * * *"
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
env:
|
|
NODE_VERSION: "20"
|
|
PNPM_VERSION: "9.14.2"
|
|
|
|
jobs:
|
|
dependency-audit:
|
|
name: Dependency Audit
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Install pnpm
|
|
run: npm install -g pnpm@${{ env.PNPM_VERSION }}
|
|
|
|
- uses: actions/setup-node@v4.0.4
|
|
with:
|
|
node-version: ${{ env.NODE_VERSION }}
|
|
|
|
- name: Install dependencies
|
|
run: pnpm install --frozen-lockfile
|
|
|
|
- name: Run dependency audit
|
|
run: pnpm audit --audit-level=high
|