search

IBM / audit-ci

Audit NPM, Yarn, PNPM, and Bun dependencies in continuous integration environments, preventing integration if vulnerabilities are found at or above a configurable threshold while ignoring allowlisted advisories
Apache License 2.0
265 stars 43 forks source link

Bug: Does not work with bun #344

Closed Sukaato closed 3 months ago

Sukaato commented 3 months ago

When using bun, audit-ci can't find which package manager is used

error spawn when using:

Error: Cannot establish package-manager type, missing package-lock.json, yarn.lock, and pnpm-lock.yaml.
    at resolvePackageManagerType (file:///tmp/bunx-1000-audit-ci@latest/node_modules/audit-ci/dist/chunk-FA3SOWIW.js:374:13)
    at mapArgvToAuditCiConfig (file:///tmp/bunx-1000-audit-ci@latest/node_modules/audit-ci/dist/chunk-FA3SOWIW.js:413:34)
    at runYargs (file:///tmp/bunx-1000-audit-ci@latest/node_modules/audit-ci/dist/chunk-FA3SOWIW.js:582:25)
    at async runAuditCi (file:///tmp/bunx-1000-audit-ci@latest/node_modules/audit-ci/dist/chunk-FA3SOWIW.js:1335:25)