39 lines
978 B
Bash
39 lines
978 B
Bash
#!/usr/bin/env bash
|
|
|
|
# Workaround to suppress yarn audit report for issues without known resolutions.
|
|
# Audit level: Moderate
|
|
# https://github.com/yarnpkg/yarn/issues/6669
|
|
|
|
set -u
|
|
|
|
set +e
|
|
output=$(yarn audit --level=moderate --json)
|
|
result=$?
|
|
set -e
|
|
|
|
if [ $result -eq 0 ]; then
|
|
# everything is fine
|
|
exit 0
|
|
fi
|
|
|
|
if [ -f yarn-audit-known-issues ] && echo "$output" | grep auditAdvisory | diff -q yarn-audit-known-issues - > /dev/null 2>&1; then
|
|
echo
|
|
echo Ignorning known vulnerabilities
|
|
exit 0
|
|
fi
|
|
|
|
echo
|
|
echo Security vulnerabilities were found that were not ignored
|
|
echo
|
|
echo Check to see if these vulnerabilities apply to production
|
|
echo and/or if they have fixes available. If they do not have
|
|
echo fixes and they do not apply to production, you may ignore them
|
|
echo
|
|
echo To ignore these vulnerabilities, run:
|
|
echo
|
|
echo "yarn audit --level=moderate --json | grep auditAdvisory > yarn-audit-known-issues"
|
|
echo
|
|
echo and commit the yarn-audit-known-issues file
|
|
|
|
exit "$result"
|