Audit project dependencies
From the package.json you get the following commands which you can run via the cli like this:
npm run audit ### check below the list of sub-scripts
{
...
"scripts":
{
...
"audit": "npx concurrently 'npm:audit:*(!fix)'",
"audit:deps:nodejs": "npx @cdklabs/cdk-cicd-wrapper-cli check-dependencies --npm",
"audit:deps:python": "npx @cdklabs/cdk-cicd-wrapper-cli check-dependencies --python",
"audit:scan:security": "npx @cdklabs/cdk-cicd-wrapper-cli security-scan --bandit --semgrep --shellcheck --ci",
"audit:license": "npm run license",
"audit:fix:license": "npm run license:fix",
"license": "npx @cdklabs/cdk-cicd-wrapper-cli license",
"license:fix": "npx @cdklabs/cdk-cicd-wrapper-cli license --fix",
...
},
...
}