also looking at this
Decide dependency advisories instead of counting them
#320
6 files
+324
-1
| @@ -297,6 +297,15 @@ jobs: | ||
| 297 | 297 | - name: Test agent environment briefing |
| 298 | 298 | run: bun test scripts/agents-guidelines.test.ts |
| 299 | 299 | |
| 300 | - name: Test dependency advisory policy | |
| 301 | run: bun test scripts/advisory-policy.test.ts | |
| 302 | ||
| 303 | # Reads the registry, so this is the step that turns a newly published | |
| 304 | # advisory into a red build rather than a larger number in a report. | |
| 305 | # Clearing it is one reviewed entry in scripts/retained-advisories.ts. | |
| 306 | - name: Review dependency advisories | |
| 307 | run: bun scripts/advisory-policy.ts | |
| 308 | ||
| 300 | 309 | - name: Test merged SBOM inventory |
| 301 | 310 | run: bun test scripts/merge-sbom.test.ts |
| 302 | 311 | |