test! deliberately introduce vuln by installing axios

[bikubi]

this is a TEST to see how a trivy vuln looks like, cf.

https://github.com/aula-app/infra/issues/4#issuecomment-4420234144

do not merge!

[bikubi]

ping @nikola-maric-aula so this is what a PR with a newly introduced high severity would look like atm.

(please disregard the axios stuff above, that was too explosive :P )

see also https://github.com/aula-app/aula-frontend/security/code-scanning?query=is%3Aopen+pr%3A1152 where the svgo vuln shows up as #19, opened N minutes ago · Detected by Trivy (cf. #2 opened last week)

[bikubi]

trashing my secret github reputation by introducing the dumbest vulns possible...

[nikola-maric-aula]

trashing my secret github reputation by introducing the dumbest vulns possible...

^^

see also https://github.com/aula-app/aula-frontend/security/code-scanning?query=is%3Aopen+pr%3A1152 where the svgo vuln shows up as #19, opened N minutes ago · Detected by Trivy (cf. #2 opened last week)

i made FE only allow merging PRs that pass the Trivy check, although I set the threshold "Critical" and this PR is blocked even with its "High" severity:

we can talk more about it tomorrow..