Support pnpm audit - Githubissues

awslabs / automated-security-helper

https://awslabs.github.io/automated-security-helper/

Apache License 2.0

361 stars 44 forks source link

Support pnpm audit #56

Closed bestickley closed 3 months ago

bestickley commented 4 months ago

I have a PNPM Monorepo. When I run ash on it, it uses npm audit which requires a package-lock.json which my project does not have. I have a pnpm-lock.yaml. Please support PNPM projects and use pnpm audit. Thank you!

awsntheule commented 4 months ago

Hey @bestickley, ASH should now use pnpm when appropriate with PR #66. Please clone the latest changes and try again when you get a chance.

bestickley commented 4 months ago

Thank you, @awsntheule, I'll try to get to this next week.

awsntheule commented 3 months ago

@bestickley, have you had a chance to confirm your issue is fixed?

bestickley commented 3 months ago

Confirmed this worked by seeing aggregated_results.txt:

Begin pnpm audit output for /src >>>>>>

No known vulnerabilities found

<<<<<< End pnpm audit output for /src <<<<<<

Thank you, @awsntheule !