From c6c421e357915f11df85ae83f98450a4e09c53a4 Mon Sep 17 00:00:00 2001 From: Ihar Hrachyshka Date: Thu, 3 Sep 2026 22:52:34 -0400 Subject: [PATCH] .github: disable npm ci audit It's currently very slow and often times brings jobs past the 3min limit. No one is reading these audit reports in ci output, and in slight chance we care to stay on top of these CVE audit reports from npm, we should have a dedicated procedure to monitor and bump lock file that doesn't involve routinely executing it in every job. (cherry picked from commit 887655a786fe5839696b99c34380644b6d5ed29d) --- .github/workflows/bot.yml | 2 +- .github/workflows/check.yml | 4 ++-- .github/workflows/teams.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/bot.yml b/.github/workflows/bot.yml index a9c97db21b6f..3e404d89c8c2 100644 --- a/.github/workflows/bot.yml +++ b/.github/workflows/bot.yml @@ -49,7 +49,7 @@ jobs: ci/github-script - name: Install dependencies - run: npm ci --package-lock-only=false @actions/artifact bottleneck + run: npm ci --package-lock-only=false --no-audit @actions/artifact bottleneck working-directory: ci/github-script # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour. diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index d6cdd5564220..fd3404f07a3b 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -51,7 +51,7 @@ jobs: ci/github-script - name: Install dependencies - run: npm ci --package-lock-only=false bottleneck + run: npm ci --package-lock-only=false --no-audit bottleneck working-directory: trusted/ci/github-script - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 @@ -153,7 +153,7 @@ jobs: - name: Install dependencies to trusted/ run: | - npm ci --package-lock-only=false + npm ci --package-lock-only=false --no-audit echo "$PWD/node_modules/.bin" >> "$GITHUB_PATH" working-directory: nixpkgs/trusted/ci/github-script diff --git a/.github/workflows/teams.yml b/.github/workflows/teams.yml index 1e6ed3175cf4..5e8e20497b7f 100644 --- a/.github/workflows/teams.yml +++ b/.github/workflows/teams.yml @@ -38,7 +38,7 @@ jobs: maintainers/github-teams.json - name: Install dependencies - run: npm ci --package-lock-only=false bottleneck + run: npm ci --package-lock-only=false --no-audit bottleneck working-directory: ci/github-script - name: Synchronise teams