Commit Graph
6 Commits
Author SHA1 Message Date
dc 2eb5d74f59 chore(ci): gate deploys on new advisories, restore lint and typecheck
Second review follow-up.

Audit gate: a flat `npm audit --audit-level=<x>` cannot work here at any
level - the tree reports 102 advisories (12 low, 38 moderate, 52 high) and
`--omit=dev` does not change the counts, because gatsby itself is a runtime
dependency of the build. Gating on the tree as a whole stops publishing
permanently; ignoring it lets a new advisory through. scripts/audit-gate.mjs
fails on any critical/high advisory that is not in scripts/audit-baseline.json,
which carries an owner and a reason, so today's set is a tracked exception and
anything new blocks the deploy. Verified both ways: exit 0 on the committed
baseline, exit 1 with an entry removed.

Lint and typecheck: the deleted GitHub workflow was the only place they ran, so
`npm run typecheck` and `npm run lint` are now steps in the publish workflow,
ahead of the build. Lint could not simply be switched on - prettier reported 8
pre-existing files on main, all single-line indentation - so those are fixed
here and the check is clean rather than baselined.

Verified locally in the order the workflow runs: audit gate 0, typecheck clean,
lint clean (8 files reformatted, indentation only), build 136 pages.
2026-10-28 12:17:50 +00:00
blog-dev 674737f840 fix: move Cyber Essentials badge to who-is section + about page, drop hero/footer placements 2026-09-11 20:22:29 +00:00
4gl 73fccc70a5 feat: first announcement
publish / Build-and-publish (push) Successful in 12m44s
2026-07-26 15:27:48 +01:00
Unknown 8a10d127c1 feat: feed feature, typescript, remove google, fix errs & warns
publish / Build-and-publish (push) Successful in 13m32s
2026-07-17 22:22:29 +01:00
Unknown efaa05549b fix: updating dependencies
publish / Build-and-publish (push) Failing after 7m15s
2026-07-13 20:17:16 +01:00
Mihajlo Medjedovic fd510b88c4 init 2024-06-05 15:53:46 +02:00