原文
A simple Go program that converts security-audit.json to security-audit.md so you can use it in CI pipeline.
You can check dependency-audit.yml out to see how CI integration looks like. This version of pipeline will create a GitHub issue even if your dependencies does not have vulnerabilities. If you do not want this behaviour, check dependency-audit-only-when-detected.yml instead.
npm-audit-to-report [FLAGS]
Flags:
--version Displays the program version string.
-h --help Displays help with available flag, subcommand, and positional value parameters.
-i --audit-file Path to the audit file (default: security-audit.json)
-o --output-file Path to the output file (default: security-audit.md)
-f --fail-if-no-vulnerabilities Fail if no vulnerabilities found