gitlab-ci-yarn-audit-parser
v1.0.3
Published
Yarn Audit parser for GitLab dependency scanning
Downloads
436
Readme
GitLab parser for Yarn Audit
Parses yarn audit
output into GitLab gl-dependency-scanning-report.json
format.
Adapted from https://github.com/mgibeau/gitlab-npm-audit-parser
Usage: gitlab-ci-yarn-audit-parser [options]
Options:
-V, --version output the version number
-o, --out <path> output filename, defaults to gl-dependency-scanning-report.json
-h, --help output usage information
How to use
Install this package.
npm install --save-dev gitlab-ci-yarn-audit-parser
Add the following job to .gitlab-ci.yml
dependency scanning:
image: node:10-alpine
script:
- npm ci
- npm audit --json | npx gitlab-ci-yarn-audit-parser -o gl-dependency-scanning.json
artifacts:
reports:
dependency_scanning: gl-dependency-scanning.json
Test
cat test/angular.json | ./parse.js -o gl-dependency-scanning-report.json