InfoSec812 / npm-audit-ci-wrapper

A wrapper for 'npm audit' which can be configurable for use in a CI/CD tool like Jenkins
Apache License 2.0
13 stars 11 forks source link

--registry command arg passed incorrectly, causing failure #43

Closed eL-HaXo closed 4 years ago

eL-HaXo commented 4 years ago

The --registry command is passed to spawn with a space, causing the audit to fail with following error: { summary: 'Invalid audit subcommand: ` --registry=https://registry.npmjs.org`\n\nUsage:\n\nnpm audit [--json]\nnpm audit fix [--force|--package-lock-only|--dry-run|--production|--only=(dev|prod)]', detail: '' } }

Removing the space fixes the issue.

eL-HaXo commented 4 years ago

This bug was introduced in this commit: https://github.com/InfoSec812/npm-audit-ci-wrapper/commit/0301d2253afc5484e1c8f4807cec38f5b2e8701e