Skip to content

Commit c32d93c

Browse files
committed
chore: explicitly disable npm cache to mitigate cache poisoning attacks
1 parent a98e082 commit c32d93c

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

.github/workflows/publish.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,8 @@ jobs:
6161
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
6262
with:
6363
node-version: 24
64+
package-manager-cache: false
65+
cache: ''
6466

6567
- name: Build NPM
6668
run: deno task build:npm ${{steps.vars.outputs.version}}
@@ -87,6 +89,8 @@ jobs:
8789
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
8890
with:
8991
node-version: 24
92+
package-manager-cache: false
93+
cache: ''
9094

9195
- name: download build
9296
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1

0 commit comments

Comments
 (0)