From 26cb400781a99d2b76a7ec8945b5226c3dbdc170 Mon Sep 17 00:00:00 2001
From: ilammy <me@ilammy.net>
Date: Thu, 19 Mar 2020 08:34:02 +0200
Subject: [PATCH] Run "npm audit" for release branch too

I'd like to be notified about weird vulnerabilities in JavaScript
libraries for the release branch as well. It's double important
since the release branch ships particular pinned version of *all*
dependencies.
---
 .github/workflows/release.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3c845ed..a215efc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,3 +23,10 @@ jobs:
         run: |
           cl.exe hello.c
           hello.exe
+  audit:
+    name: npm audit
+    runs-on: windows-latest
+    steps:
+      - name: Check out source code
+        uses: actions/checkout@v1
+      - run: npm audit