You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When the yarn audit runs out of memory as described in the yarn issue this results in audit-ci generating an audit pass.
It's hard to say what the expected behaviour is here.. I know the root issue is not the fault of this package, but a pass in this case could mask this issue for some time in a CI environment, missing vulnerabilites.
I've verified this by profiling memory usage, the instant it hits the max heap size an audit pass is generated.
The text was updated successfully, but these errors were encountered:
Thank you for the bug report! Having audit-ci swallow and pass an audit on an out of memory error is definitely not the right behaviour. Should probably just bubble up the error and let the process exit with a failure.
Hi, first of all thanks for providing and maintaining this package.
I've noticed an interesting issue relating to yarnpkg/yarn#7404
When the yarn audit runs out of memory as described in the yarn issue this results in audit-ci generating an audit pass.
It's hard to say what the expected behaviour is here.. I know the root issue is not the fault of this package, but a pass in this case could mask this issue for some time in a CI environment, missing vulnerabilites.
I've verified this by profiling memory usage, the instant it hits the max heap size an audit pass is generated.
The text was updated successfully, but these errors were encountered: