From f4dadc7513bfd1274d43c602e8a87b1aa939e496 Mon Sep 17 00:00:00 2001
From: ewez <piorek.ewa@wp.pl>
Date: Wed, 11 Nov 2026 18:28:12 +0100
Subject: [PATCH] Added job to scan for JS vulnerabilities

---
 .github/workflows/ci.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c3e16739..dff7b0af 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,6 +24,21 @@ jobs:
       - name: Scan for known security vulnerabilities in gems used
         run: bin/bundler-audit
 
+  scan_js:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: .node-version
+
+      - name: Scan for known security vulnerabilities in npm packages
+        run: npm audit --audit-level=high
+
   lint:
     runs-on: ubuntu-latest
     env: