Ensure that your audit-ci
config is up to date with a codemod!
npx @quinnturner/audit-ci-codemod
Turns into
{
// This is a comment, whoa
"low": true,
"allowlist": [
// GHSA-74fj-2j2h-c42q
"GHSA-74fj-2j2h-c42q|github-build>axios>follow-redirects",
"GHSA-74fj-2j2h-c42q",
// GHSA-4w2v-q235-vp99
"GHSA-4w2v-q235-vp99",
"GHSA-4w2v-q235-vp99|axios",
"GHSA-4w2v-q235-vp99|github-build>axios",
// GHSA-cph5-m8f7-6c5x
"GHSA-cph5-m8f7-6c5x|axios",
"GHSA-cph5-m8f7-6c5x|github-build>axios",
// Others to ensure modules and wildcards are supported
"github-build",
"*|jest",
"GHSA-cph5-m8f7-6c5x",
"axios",
"GHSA-74fj-2j2h-c42q|axios>follow-redirects"
]
}