Merge pull request #1629 from schul-cloud/feature/OPS-247

create npm audit workflow

.github/workflows/security-audit.yml

@@ -0,0 +1,18 @@
+name: Security Audit
+
+on: [push]
+
+jobs:
+  PROD:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - name: npm audit prod
+        run: npm audit --production --audit-level=low
+  DEV:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - name: npm audit dev
+      # --only=dev currently does not work: https://npm.community/t/npm-audit-without-fix-ignores-only-prod/3959/7
+        run: npm audit --only=dev --audit-level=moderate