This project provides packages that allow certain pnpm commands to be used in a CI/CD environment.

This package provides a command that allows pnpm audit to be used in a CI/CD environment.

This project was inspired by similar tools available for npm and yarn

pnpx pnpm-ci-tools audit

Only advisories that meet the minimum severity level are reported.

pnpx pnpm-ci-tools audit --audit-level=[low,moderate,high,critical]

Advisories with the specified id values are not reported.

pnpx pnpm-ci-tools audit -i 123,456

or

pnpx pnpm-ci-tools audit -i 123 -i 456

In this mode, any advisory that is ignored using --ignore-advisories but is not detected by the audit will cause the command to fail.

pnpx pnpm-ci-tools audit -i 123,456 --strict

As an alternative to using pnpx, this package can be installed as a dev dependency in a project and run from an npm script.

pnpm add -D pnpm-ci-tools

If installing this package in a monorepo that uses pnpm workspaces then install it in the workspace root using:

pnpm add -D -w pnpm-ci-tools