Browse Source

fix(publish): Use `yarn audit` instead of `npm audit` (#411)

Rajiv Shah 5 years ago
parent
commit
deeb28306b
1 changed files with 2 additions and 2 deletions
  1. 2 2
      .github/workflows/release-npm.yml

+ 2 - 2
.github/workflows/release-npm.yml

@@ -50,7 +50,7 @@ jobs:
         working-directory: ${{ matrix.package.path }}
         working-directory: ${{ matrix.package.path }}
         run: |
         run: |
           echo "# NPM Audit Results" | tee -a ${{runner.workspace }}/notes.md
           echo "# NPM Audit Results" | tee -a ${{runner.workspace }}/notes.md
-          npm audit 2>&1 | tee -a ${{runner.workspace }}/notes.md
+          yarn audit 2>&1 | tee -a ${{runner.workspace }}/notes.md
       - name: Publish ${{ matrix.package.name }}
       - name: Publish ${{ matrix.package.name }}
         if: env.PACKAGE_VERSION != env.PUBLISHED_VERSION
         if: env.PACKAGE_VERSION != env.PUBLISHED_VERSION
         working-directory: ${{ matrix.package.path }}
         working-directory: ${{ matrix.package.path }}
@@ -78,7 +78,7 @@ jobs:
         env:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
         with:
-          upload_url: ${{ steps.create_npm_release.outputs.upload_url }} 
+          upload_url: ${{ steps.create_npm_release.outputs.upload_url }}
           asset_path: ./${{ matrix.package.path }}/${{ matrix.package.registryName }}-${{ env.PACKAGE_VERSION }}.tgz
           asset_path: ./${{ matrix.package.path }}/${{ matrix.package.registryName }}-${{ env.PACKAGE_VERSION }}.tgz
           asset_name: ${{ matrix.package.registryName }}-${{ env.PACKAGE_VERSION }}.tgz
           asset_name: ${{ matrix.package.registryName }}-${{ env.PACKAGE_VERSION }}.tgz
           asset_content_type: application/x-gtar
           asset_content_type: application/x-gtar