Marcel e8057fe517 chore(ci): add npm audit --audit-level=high gate to CI pipeline ...

Blocks merges when any HIGH or CRITICAL advisory enters the production
dependency tree. Runs after npm ci (or cache restore) and before lint,
so a failing audit surfaces immediately without wasting test time.

Closes the systemic gap from pre-prod audit finding F-22 (dependency
hygiene). Renovate automation is tracked separately.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 13:56:03 +02:00

..

workflows

chore(ci): add npm audit --audit-level=high gate to CI pipeline

2026-05-19 13:56:03 +02:00