Repository navigation

fix(clickables-fix): Clickables implementations fix #277

	name: Security Audit
	on:
	push:
	branches:
	- main
	pull_request:
	schedule:
	- cron: "0 8 * * 1" # Every Monday at 08:00 UTC
	jobs:
	dependency-review:
	if: github.event_name == 'pull_request'
	runs-on: ubuntu-latest
	permissions:
	contents: read
	pull-requests: write
	steps:
	- name: Checkout 🛎️
	uses: actions/checkout@v7

	- name: Dependency Review 🔍
	uses: actions/dependency-review-action@v5
	with:
	fail-on-severity: high
	comment-summary-in-pr: always

	npm-audit:
	if: github.event_name == 'push'
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout 🛎️
	uses: actions/checkout@v7

	- name: Install 🔧
	run: npm install --legacy-peer-deps

	- name: npm audit 🔒
	run: npm audit --audit-level=high

	npm-audit-scheduled:
	# Scheduled workflows run only from the default branch, so each branch
	# to be audited weekly must be checked out explicitly here.
	if: github.event_name == 'schedule'
	runs-on: ubuntu-latest
	permissions:
	contents: read
	strategy:
	fail-fast: false
	matrix:
	branch:
	- main
	- release-38-LTS
	steps:
	- name: Checkout ${{ matrix.branch }} 🛎️
	uses: actions/checkout@v7
	with:
	ref: ${{ matrix.branch }}

	- name: Install 🔧
	run: npm install --legacy-peer-deps

	- name: npm audit (${{ matrix.branch }}) 🔒
	run: npm audit --audit-level=high