Add build vulnerability scan (#317)

* run vulnerability scan + testing * revert npm audit test --------- Co-authored-by: Victoria Hall <[email protected]>
Azure · Dec 18, 2024 · cc3613c · cc3613c
1 parent 4b36578
commit cc3613c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/azure-pipelines/templates/build.yml b/azure-pipelines/templates/build.yml
@@ -16,6 +16,8 @@ jobs:
             displayName: 'Install Node.js'
           - script: npm ci
             displayName: 'npm ci'
+          - script: npm audit --production
+            displayName: 'Run vulnerability scan'
           - script: npm run updateVersion -- --buildNumber $(Build.BuildNumber)
             displayName: 'npm run updateVersion'
             condition: and(succeeded(), eq(${{ parameters.IsPrerelease }}, true))