[Security] - Checks on Dev Dependencies in CI

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Developer Tools

      Currently, we have CI Security checks only applies to prod ones. We should enable third party vuln checks for dev dependencies as well, since they run in CI Sandbox, which make Workers vulnerable of exploitation via Dev Deps.

      AC: 

      1. Generate a list of dev deps that have vulns
      2. Enable the check on the CI for dev deps
      3. Create follow up tickets (after ignore them initially which tickets linked)

            Assignee:
            Unassigned
            Reporter:
            Sunil Yadav (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: