Skip to content

chore: Corrected wrong scoping for some actions #119

chore: Corrected wrong scoping for some actions

chore: Corrected wrong scoping for some actions #119

Workflow file for this run

name: Build & Test
on:
push:
branches: [main, '*.x']
pull_request:
branches: [main, '*.x']
# Default token to read-only; jobs widen only what they need.
permissions:
contents: read
jobs:
build-test:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Harden the runner (audit all outbound calls)
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Setup Node
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 20
cache: npm
- name: Check package.json file references
run: node scripts/check-referenced-files.mjs
- run: npm ci
- run: npm run lint
- run: npm run typecheck
- run: npm run build
- name: Verify committed dist is in sync with src
run: git diff --exit-code -- dist
- run: npm run test:node
- run: npm run test:fuzz
browser:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Harden the runner (audit all outbound calls)
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Setup Node
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 20
cache: npm
- run: npm ci
- run: npm run build
- run: npx playwright install --with-deps chromium firefox webkit
- run: npm run test:browser