hspotlight / metro-fare

metro-fare.vercel.app
MIT License
14 stars 13 forks source link

Add security audit #16

Closed ibotdotout closed 3 years ago

ibotdotout commented 4 years ago

Hi, I added Hawkeye as security scan/audit and I upgraded some outdated dependencies that only patch versions.

TLDR: why Hawkeye, support many languages not only JS/TS. Actually Hawkeye just abstract layer, It will use other library for scan security depends on language ex. JS - npm audit, Java - find-sec-bug

ibotdotout commented 3 years ago

@hspotlight Hawkeye is deprecated. Do you mind if I do another PR to change the security audit to another tool ?

Also, I looking for something on related to Pipeline, Project Setup, Security. Let me know if you have any idea about those things.