bo0tzz
504930947d
fix: various actions workflow security improvements ( #17651 )
...
* fix: set persist-credentials explicitly for checkout
https://woodruffw.github.io/zizmor/audits/#artipacked
* fix: minimize permissions scope for workflows
https://woodruffw.github.io/zizmor/audits/#excessive-permissions
* fix: remove potential template injections
https://woodruffw.github.io/zizmor/audits/#template-injection
* fix: only pass needed secrets in workflow_call
https://woodruffw.github.io/zizmor/audits/#secrets-inherit
* fix: push perm for single-arch build jobs
I hadn't realised these push to the registry too :x
* chore: fix formatting
* fix: $
* fix: retag job quoting
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2025-04-18 15:10:27 -05:00
renovate[bot]
9d0dd9dff8
chore(deps): update github-actions ( #17605 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-15 12:03:45 +01:00
renovate[bot]
9105e696bf
chore(deps): pin github action dependencies ( #16923 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-17 17:25:14 +00:00
Zack Pollard
5912fcc393
ci: use .nvmrc for node-setup node-version in github actions ( #10619 )
...
* chore: add node version pinning with .nvmrc and volta for the typescript sdk
* ci: add missing setup-node actions and use .nvmrc for setup-node node-version
2024-06-25 14:01:15 +01:00
Jason Rasmussen
17d7d9364f
chore: publish sdk on release ( #7895 )
...
* chore: publish sdk on release
* fix: runtime dep
* chore: sync versions
* chore: update readme
* fix: use Node16 module resolution
2024-03-12 12:01:12 -04:00