chore: 🤖 Allow known audit vulnerability to be ignored

scripts/yarn-audit.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+
+# Workaround to suppress yarn audit report for issues without known resolutions.
+# Audit level: Moderate
+# https://github.com/yarnpkg/yarn/issues/6669
+
+set -u
+
+set +e
+output=$(yarn audit --level=moderate --json)
+result=$?
+set -e
+
+if [ $result -eq 0 ]; then
+	# everything is fine
+	exit 0
+fi
+
+if [ -f yarn-audit-known-issues ] && echo "$output" | grep auditAdvisory | diff -q yarn-audit-known-issues - > /dev/null 2>&1; then
+	echo
+	echo Ignorning known vulnerabilities
+	exit 0
+fi
+
+echo
+echo Security vulnerabilities were found that were not ignored
+echo
+echo Check to see if these vulnerabilities apply to production
+echo and/or if they have fixes available. If they do not have
+echo fixes and they do not apply to production, you may ignore them
+echo
+echo To ignore these vulnerabilities, run:
+echo
+echo "yarn audit --level=moderate --json | grep auditAdvisory > yarn-audit-known-issues"
+echo
+echo and commit the yarn-audit-known-issues file
+
+exit "$result"