simon/semantic-release
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ci(dependencies): audited signatures and provenance attestations of installed packages

Browse Source
This commit is contained in:
Matt Travi
2023-04-21 16:41:27 -05:00
parent 278d8e6bec
commit ef998acd4d
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/release.yml
+2 -1
View File
@@ -23,7 +23,8 @@ jobs:
with: with:
cache: npm cache: npm
node-version: lts/* node-version: lts/*
- run: npm ci - run: npm clean-install
- run: npm audit signatures
- run: npx semantic-release - run: npx semantic-release
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
.github/workflows/test.yml
+1
View File
@@ -36,6 +36,7 @@ jobs:
node-version: ${{ matrix.node-version }} node-version: ${{ matrix.node-version }}
cache: npm cache: npm
- run: npm clean-install - run: npm clean-install
- run: npm audit signatures
- name: Ensure dependencies are compatible with the version of node - name: Ensure dependencies are compatible with the version of node
run: npx ls-engines run: npx ls-engines
- run: npm run test:ci - run: npm run test:ci