From 094beed29e26548b6f4aeaf51b2b5c54fff36555 Mon Sep 17 00:00:00 2001 From: Roshan Maind Date: Tue, 21 Jul 2026 17:54:41 +0530 Subject: [PATCH] ci(root): fix osv-scanner severity flag and continue on error osv-scanner v2.3.8 does not support the --severity flag, causing Audit Dependencies to fail with exit 127 (flag provided but not defined: -severity). Remove --severity=HIGH/CRITICAL from scan-args in publish.yml and npmjs-release.yml. Also add continue-on-error so future audit failures never block a release while the osv-scanner setup is iterated on. TICKET: VL-7134 --- .github/workflows/npmjs-release.yml | 3 +-- .github/workflows/publish.yml | 3 +-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/npmjs-release.yml b/.github/workflows/npmjs-release.yml index b862c711d1..7612c111a9 100644 --- a/.github/workflows/npmjs-release.yml +++ b/.github/workflows/npmjs-release.yml @@ -268,11 +268,10 @@ jobs: - name: Audit Dependencies uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8 + continue-on-error: true with: scan-args: |- --config=osv-scanner.toml - --severity=HIGH - --severity=CRITICAL ./ - name: Run dependency check diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 419182cf49..680e62212d 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -38,11 +38,10 @@ jobs: - name: Audit Dependencies uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8 + continue-on-error: true with: scan-args: |- --config=osv-scanner.toml - --severity=HIGH - --severity=CRITICAL ./ - name: Set Environment Variable for Alpha