npm-security:
    stage: security
    image: node:24
    before_script: 
        - npm install --location=global audit-ci@^6
    script:
        - audit-ci -p npm -o json > npm-security-checker-report.json
    artifacts:
        when: on_failure
        expose_as: 'npm-security-checker'
        paths:
          - npm-security-checker-report.json
    allow_failure: true
    rules:
        - if: $CI_PIPELINE_SOURCE == "merge_request_event"
        - if: $CI_COMMIT_BRANCH == "trunk" || $CI_COMMIT_BRANCH == "master" || $CI_COMMIT_BRANCH == "main"
        - if: $CI_COMMIT_TAG != null