From fbd9371884d0e87376d67eb98c17a4d62e4e6dd1 Mon Sep 17 00:00:00 2001
From: Joe Boccanfuso <109477394+jbocce@users.noreply.github.com>
Date: Tue, 14 Oct 2025 23:07:00 -0400
Subject: [PATCH] fix(security): Run bun audit before bun install. (#5496)

---
 .circleci/config.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 2ae3ac77a..5df62e047 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -112,9 +112,6 @@ jobs:
       - checkout
       - attach_workspace:
           at: ~/repo
-      - run:
-          name: Install Dependencies
-          command: bun install --frozen-lockfile
       # SECURITY AUDIT
       - run:
           name: 'Security Audit - High Risk Vulnerabilities'
@@ -143,6 +140,9 @@ jobs:
               echo "❌ This build cannot proceed until high-risk vulnerabilities are resolved."
               exit 1
             fi
+      - run:
+          name: Install Dependencies
+          command: bun install --frozen-lockfile
       - run:
           name: Avoid hosts unknown for github
           command: |