Skip to content

Weekly security drift — high/critical vulns detected #5

Description

@github-actions

Weekly dependency drift

npm audit --audit-level=high (full dependency tree, including devDeps)
detected at least one high or critical vulnerability since
the last clean run.

Triage

  1. Open the drift audit artifacts from the workflow run.
  2. Bump the affected package(s) or add an explicit, time-bounded
    .snyk suppression per docs/SECURITY.md (reason + expires).
  3. Close this issue when the next weekly run passes.

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity-related issue or scan result

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions