From 6e8bc1c369e32fcadbb2948e5e4deca26ba167fd Mon Sep 17 00:00:00 2001
From: pavlov346346-source <pavlov346346@gmail.com>
Date: Fri, 11 Sep 2026 07:49:24 +0300
Subject: [PATCH] ci: use locked dependencies and fail on high audit findings

---
 .github/workflows/qa.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index b5afccb..3b05951 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -13,7 +13,8 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-      - run: npm install
+      - run: npm ci
+      - run: npm audit --audit-level=high
       - run: npm run check:deploy
       - run: npx playwright install --with-deps chromium
       - run: npm run test:e2e