Skip to content

Conversation

@CommanderStorm
Copy link
Member

this PR makes local development simpler by shifting us from the "everything goes via the web" to a "maybe consider local files, fallback to the web" achitecture.

It also comes with tests.

uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
uses: docker/setup-buildx-action@v3

- name: Build data image
uses: docker/build-push-action@v6

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
cache-to: type=gha,mode=max

- name: Build server image
uses: docker/build-push-action@v6

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
PROFILE=debug

- name: Set up pnpm
uses: pnpm/action-setup@v4

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
version: 10

- name: Set up Node.js
uses: actions/setup-node@v4

Check failure

Code scanning / zizmor

runtime artifacts potentially vulnerable to a cache poisoning attack Error

runtime artifacts potentially vulnerable to a cache poisoning attack
version: 10

- name: Set up Node.js
uses: actions/setup-node@v4

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference

- name: Upload test results
if: always()
uses: actions/upload-artifact@v4

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference

- name: Upload test results (JUnit)
if: always()
uses: actions/upload-artifact@v4

Check failure

Code scanning / zizmor

unpinned action reference Error

unpinned action reference
Comment on lines +23 to +24
- name: Checkout code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

Check warning

Code scanning / zizmor

credential persistence through GitHub Actions artifacts Warning

credential persistence through GitHub Actions artifacts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants