build(ci): only audit for production dependencies

Signed-off-by: Jérôme Benoit <jerome.benoit@sap.com>

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0f1d9f858dcdf894a86c2ebd647660be0b0022c7..fef46bc437f684580e3b5715117b42ba3ad9d407 100644 (file)
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,7 +54,7 @@ jobs:
         run: pnpm install --ignore-scripts --frozen-lockfile
       - name: pnpm audit
         if: ${{ matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
-        run: pnpm audit
+        run: pnpm audit --prod
       - name: pnpm lint
         if: ${{ matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
         run: pnpm lint
@@ -107,7 +107,7 @@ jobs:
         run: pnpm install --ignore-scripts --frozen-lockfile
       - name: pnpm audit
         if: ${{ matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
-        run: pnpm audit
+        run: pnpm audit --prod
       - name: pnpm lint
         if: ${{ matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
         run: pnpm lint