ossf / package-feeds

Feed parsing for language package manager updates
Apache License 2.0
70 stars 24 forks source link

Only deploy when manually triggered. #443

Closed calebbrown closed 3 months ago

calebbrown commented 3 months ago

Currently whenever a PR is merged into "main" branch the change is deployed.

This change disables the automated behavior, instead requiring a manual trigger of the action.

This is useful because package-feeds is stateless. This means that it is possible a change is missed during an update.

Using a manual trigger reduces the number of deploys, particularly for no-op changes (e.g. workflows), or multiple dependency updates.