From 86a13e895eaba16ab3dcd166c25a496ed4b25f16 Mon Sep 17 00:00:00 2001 From: Louis Varin Date: Wed, 22 Jul 2026 14:37:11 -0400 Subject: [PATCH] ci: fail osv-scanner on high and critical TICKET: VL-7134 --- .github/workflows/npmjs-release.yml | 2 ++ .github/workflows/publish.yml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/.github/workflows/npmjs-release.yml b/.github/workflows/npmjs-release.yml index 18c6dd48fe..b862c711d1 100644 --- a/.github/workflows/npmjs-release.yml +++ b/.github/workflows/npmjs-release.yml @@ -271,6 +271,8 @@ jobs: with: scan-args: |- --config=osv-scanner.toml + --severity=HIGH + --severity=CRITICAL ./ - name: Run dependency check diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index d89eaef19f..419182cf49 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -41,6 +41,8 @@ jobs: with: scan-args: |- --config=osv-scanner.toml + --severity=HIGH + --severity=CRITICAL ./ - name: Set Environment Variable for Alpha