GHA Improvements - Githubissues

jfmengels / node-elm-review

CLI for elm-review

BSD 3-Clause "New" or "Revised" License

48 stars 25 forks source link

Open lishaduck opened 3 months ago

lishaduck commented 3 months ago

Some improvements:

[ ] Run GHA in a matrix to catch incompatibility issues faster
[x] Make some GHA security fixes
- [x] Pin dependencies
- [x] Restrict permissions
[x] Add dependabot
[x] Update GHA dependencies
[ ] #57
[ ] Automate NPM releases (with provenance)
[ ] Document this somewhere (https://github.com/jfmengels/node-elm-review/pull/186#discussion_r1670750284)
[ ] Fix CI running twice on PRs

lishaduck commented 1 week ago

@jfmengels, I just figured out why we hit rate-limits so much: we run CI on push to any branch & on PRs, so it gets run twice.