[INTERNAL] Adjust semver pattern for v2 audit (#845)

Updates #844 pattern, so it would cover all the cases.
SAP · Jul 4, 2023 · 03bbafb · 03bbafb
1 parent ad8d87f
commit 03bbafb
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -24,7 +24,9 @@
 		// "semver" is a dependency of "make-dir" that's only used in v2 branch. As we have decided to
 		// deprecate the v2 branch and encourage people to migrate their projects to v3, we are not
 		// considering fix for this.
-		"GHSA-c2qf-rxjj-qqgw|make-dir>semver>",
-		"GHSA-c2qf-rxjj-qqgw|*>make-dir>semver>*"
+		"GHSA-c2qf-rxjj-qqgw|semver>", // Direct path
+		"GHSA-c2qf-rxjj-qqgw|*make-dir>semver*",
+		"GHSA-c2qf-rxjj-qqgw|*>normalize-package-data>semver*",
+		"GHSA-c2qf-rxjj-qqgw|*npm-package-arg>semver*"
 	]
   }