• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

oke-py / npm-audit-action
94%

Build:
DEFAULT BRANCH: main
Repo Added 09 Dec 2019 06:26AM UTC
Files 10
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x
Reset
  • main
  • chore-bump-vite-7
  • chore-node24
  • chore-update-devcontainer-node24
  • chore/auto-commit-dist
  • chore/bump-v5-references
  • chore/consolidate-node-version
  • chore/coverage-exclude
  • chore/format-code
  • chore/husky-biome
  • chore/input-aggregation
  • chore/input-validation
  • chore/issue-handler
  • chore/pr-handler
  • chore/release-flow
  • chore/remove-github-context-dump
  • chore/remove-strip-ansi
  • chore/update-biome
  • chore/update-rollup-plugin-commonjs
  • chore/workdir-normalize
  • ci-add-format-lint
  • ci/ubuntu-slim
  • dependabot/github_actions/actions/checkout-5
  • dependabot/github_actions/actions/checkout-6
  • dependabot/github_actions/actions/checkout-7
  • dependabot/github_actions/actions/setup-node-5
  • dependabot/github_actions/actions/setup-node-6
  • dependabot/github_actions/actions/upload-artifact-5
  • dependabot/github_actions/actions/upload-artifact-6
  • dependabot/github_actions/googleapis/release-please-action-5.0.0
  • dependabot/npm_and_yarn/actions/github-9.1.0
  • dependabot/npm_and_yarn/js-yaml-4.1.1
  • dependabot/npm_and_yarn/lint-staged-17.0.7
  • dependabot/npm_and_yarn/npm-development-0621cbfa1d
  • dependabot/npm_and_yarn/npm-development-0abb4216a7
  • dependabot/npm_and_yarn/npm-development-0d644f2d38
  • dependabot/npm_and_yarn/npm-development-207cc0e366
  • dependabot/npm_and_yarn/npm-development-22e967f54e
  • dependabot/npm_and_yarn/npm-development-3af3bb6690
  • dependabot/npm_and_yarn/npm-development-3bd5c86cd2
  • dependabot/npm_and_yarn/npm-development-44135b917d
  • dependabot/npm_and_yarn/npm-development-45189b8b5a
  • dependabot/npm_and_yarn/npm-development-4b56d8a765
  • dependabot/npm_and_yarn/npm-development-527f145936
  • dependabot/npm_and_yarn/npm-development-6452f3cdf4
  • dependabot/npm_and_yarn/npm-development-6ff43f59a8
  • dependabot/npm_and_yarn/npm-development-7124f32fe7
  • dependabot/npm_and_yarn/npm-development-8a00122292
  • dependabot/npm_and_yarn/npm-development-8e7c1a2d2d
  • dependabot/npm_and_yarn/npm-development-90ed8bb720
  • dependabot/npm_and_yarn/npm-development-92d770555e
  • dependabot/npm_and_yarn/npm-development-92e93fd248
  • dependabot/npm_and_yarn/npm-development-989a747677
  • dependabot/npm_and_yarn/npm-development-a27ab509f4
  • dependabot/npm_and_yarn/npm-development-a463c5f21b
  • dependabot/npm_and_yarn/npm-development-a8d34152f6
  • dependabot/npm_and_yarn/npm-development-b11d25f172
  • dependabot/npm_and_yarn/npm-development-ba40c13628
  • dependabot/npm_and_yarn/npm-development-bed271ccbc
  • dependabot/npm_and_yarn/npm-development-c0e5b47084
  • dependabot/npm_and_yarn/npm-development-c7dc17cb06
  • dependabot/npm_and_yarn/npm-development-c8d6422a19
  • dependabot/npm_and_yarn/npm-development-d25cbb4133
  • dependabot/npm_and_yarn/npm-development-de7394ea06
  • dependabot/npm_and_yarn/npm-development-e1073f122b
  • dependabot/npm_and_yarn/npm-development-f7539d066c
  • dependabot/npm_and_yarn/npm-production-70fddd89e4
  • dependabot/npm_and_yarn/npm-production-7f651a7296
  • dependabot/npm_and_yarn/npm-production-afab0e4ae4
  • dependabot/npm_and_yarn/npm-production-be1c8ba09d
  • dependabot/npm_and_yarn/octokit/rest-22.0.0
  • dependabot/npm_and_yarn/picomatch-4.0.4
  • dependabot/npm_and_yarn/rollup-4.40.1
  • dependabot/npm_and_yarn/rollup/plugin-commonjs-28.0.3
  • dependabot/npm_and_yarn/rollup/plugin-node-resolve-16.0.1
  • dependabot/npm_and_yarn/rollup/plugin-typescript-12.1.2
  • dependabot/npm_and_yarn/typescript-6.0.2
  • dependabot/npm_and_yarn/undici-6.24.0
  • dependabot/npm_and_yarn/undici-6.24.1
  • dependabot/npm_and_yarn/undici-6.27.0
  • dependabot/npm_and_yarn/vite-6.3.6
  • dependabot/npm_and_yarn/vite-6.4.1
  • dependabot/npm_and_yarn/vite-8.0.0
  • dependabot/npm_and_yarn/vite-8.0.16
  • dependabot/npm_and_yarn/vite-8.0.5
  • disable-windows-test
  • docs/add-clinerules
  • docs/add-major-version-release-procedure
  • docs/clarify-pr-language-requirements
  • docs/scope-and-monorepo
  • docs/update-clinerules
  • docs/update-clinerules-formatting
  • docs/update-dist-guidelines
  • docs/update-docs
  • docs/update-gh-pr-create-usage
  • docs/update-typescript-best-practices
  • feat/dedupe-comments
  • feat/ignore-ghsas
  • feat/issue-type-input
  • feat/markdown-report
  • feat/registry-input
  • feat/resolve-pr-comments
  • feature/add-workflow-step-names
  • feature/add-zizmor
  • feature/eslint9-migration
  • feature/improve-release-process
  • feature/migrate-to-esm
  • feature/migrate-to-rollup
  • feature/release-please-pat
  • feature/sync-dist-on-pr
  • feature/update-to-v3
  • feature/update-to-v4
  • fix-npm-cmd-error
  • fix-vulnerabilities
  • fix/add-tslib-dependency
  • fix/ci
  • fix/conditional-coveralls-upload
  • fix/dependabot-pr-comments
  • fix/disable-windows-jobs
  • fix/esbuild-ghsa-g7r4-m6w7-qqqr
  • fix/prettier-eslint-conflict
  • fix/remove-explicit-any
  • fix/remove-github-context-input
  • fix/rollup
  • fix/suppress-test-output
  • fix/test-coverage-src-only
  • fix/truncate-long-issue-body
  • fix/tsconfig-exclude-vitest-config
  • fix/unused-vars
  • fix/update-eslint-dependencies
  • fix/windows-build-failure
  • fix/windows-powershell-execution-policy
  • fix/windows-spawnsync-einval
  • master
  • node20
  • node22
  • permissions
  • refactor/consolidate-input-reading
  • refactor/es2020-modernization
  • refactor/remove-run-call-from-main
  • refactor/rename-format-scripts
  • refactor/sync-with-typescript-action
  • refactor/testing-framework-vitest
  • refactor/update-eslint-config
  • refactor/update-prettier-config
  • refactor/update-prettierignore
  • refs/pull/209/merge
  • refs/pull/231/merge
  • refs/pull/232/merge
  • refs/pull/237/merge
  • refs/pull/244/merge
  • refs/pull/246/merge
  • refs/pull/249/merge
  • refs/pull/250/merge
  • refs/pull/255/merge
  • refs/pull/261/merge
  • release-please--branches--main--components--npm-audit-action
  • release/v4.0.2
  • releases/v1.1
  • remove-graphql-dependency
  • snyk-fix-5166ac6c25c292a0b8b605fc6d95a976
  • snyk-upgrade-10b2c48429f343a513f1985ab518573f
  • snyk-upgrade-71976470fd388fd2a388bf0c335b9da6
  • update-actions-core
  • update-actions-github
  • update-dependencies
  • update-devcontainer

14 Jul 2026 10:32AM UTC coverage: 94.168%. Remained the same
29325729402

push

github

web-flow
chore(main): release 5.4.0 (#381)

:robot: I have created a release *beep* *boop*
---


##
[5.4.0](https://github.com/oke-py/npm-audit-action/compare/v5.3.0...v5.4.0)
(2026-07-14)


### Features

* add ignore_ghsas input to exclude advisories from the result
([#379](https://github.com/oke-py/npm-audit-action/issues/379))
([70d3d64](https://github.com/oke-py/npm-audit-action/commit/70d3d6417))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

227 of 248 branches covered (91.53%)

Branch coverage included in aggregate %.

322 of 335 relevant lines covered (96.12%)

202.13 hits per line

Relevant lines Covered
Build:
Build:
335 RELEVANT LINES 322 COVERED LINES
202.13 HITS PER LINE
Source Files on main
  • Tree
  • List 10
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line Branch Hits Branch Misses

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
29325729402 main chore(main): release 5.4.0 (#381) :robot: I have created a release *beep* *boop* --- ## [5.4.0](https://github.com/oke-py/npm-audit-action/compare/v5.3.0...v5.4.0) (2026-07-14) ### Features * add ignore_ghsas input to exclude advisories from... push 14 Jul 2026 10:33AM UTC web-flow github
94.17
29322880965 main feat: add ignore_ghsas input to exclude advisories from the result (#379) ## Summary - Closes #196: adds an `ignore_ghsas` input taking GHSA advisory IDs (comma, space, or newline separated) that are excluded from the pass/fail decision — for adv... push 14 Jul 2026 09:46AM UTC web-flow github
94.17
29318418149 main docs: state the action's scope and document the monorepo matrix pattern (#378) ## Summary - Add a **Scope: when to use this action** section to the README, positioning the action as a small `npm audit` CI gate — no external service or token, bloc... push 14 Jul 2026 08:33AM UTC web-flow github
95.75
29152603569 main ci: serialize daily scan jobs and dedupe report comments Running the three OS jobs in parallel could race past the dedupe_issues check and file duplicate issues when no open issue exists yet. max-parallel: 1 plus needs: scan runs them sequentiall... push 11 Jul 2026 12:26PM UTC oke-py github
95.75
29152528038 main ci: use the markdown report format in the daily scan Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> push 11 Jul 2026 12:23PM UTC oke-py github
95.75
29152364341 main chore: remove duplicated and intra-PR entries from the changelog Merge commits carried the PR title in their body, so release-please listed each change twice, and fix commits made during PR review showed up as standalone bug fixes. The repository... push 11 Jul 2026 12:17PM UTC oke-py github
95.75
29151897142 main Merge pull request #377 from oke-py/release-please--branches--main--components--npm-audit-action chore(main): release 5.3.0 push 11 Jul 2026 12:00PM UTC web-flow github
95.75
29151842470 main Merge pull request #376 from oke-py/feat/markdown-report feat: add report_format input to post the report as markdown push 11 Jul 2026 11:58AM UTC web-flow github
95.75
29024903906 main Merge pull request #374 from oke-py/release-please--branches--main--components--npm-audit-action chore(main): release 5.2.0 push 09 Jul 2026 02:20PM UTC web-flow github
93.41
29024744668 main Merge pull request #375 from oke-py/feat/resolve-pr-comments feat: add resolve_pr_comments input to mark report comments resolved push 09 Jul 2026 02:17PM UTC web-flow github
93.41
See All Builds (785)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc