Merge pull request #84 from brave/features/no-npm-audit-on-bots

workflows: no audit on bots
brave · Oct 8, 2024 · bd33ef2 · bd33ef2
2 parents c98c6c5 + 2c394df
commit bd33ef2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -13,8 +13,10 @@ jobs:
       with:
         node-version: ${{ matrix.node-version }}
     - run: npm install
+    - name: audit
+      run: npm audit --production
+      if: ${{ github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' }}
     - name: Run scripts
       run: |
         npm run lint
-        npm audit --production
         npm test