Skip to content

Commit 01e7361

Browse files
committed
chore: Harden review-sync pipeline and resolve reviewer feedback
Signed-off-by: darshit2308 <darshit2308@gmail.com>
1 parent ed2fbe8 commit 01e7361

2 files changed

Lines changed: 35 additions & 0 deletions

File tree

.github/workflows/review-sync.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ permissions:
2626
pull-requests: write
2727
issues: write
2828
contents: read
29+
checks: read
2930

3031
concurrency:
3132
group: ${{ github.workflow }}
Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
name: Test Review Sync
2+
3+
on:
4+
push:
5+
paths:
6+
- '.github/scripts/review-sync/**'
7+
- '.github/workflows/test-review-sync.yml'
8+
pull_request:
9+
paths:
10+
- '.github/scripts/review-sync/**'
11+
- '.github/workflows/test-review-sync.yml'
12+
13+
jobs:
14+
test:
15+
runs-on: hl-sdk-py-lin-md
16+
permissions:
17+
contents: read
18+
steps:
19+
- name: Harden the runner
20+
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
21+
with:
22+
egress-policy: audit
23+
24+
- name: Checkout repository
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af68 # v4.2.2
26+
27+
- name: Setup Node.js
28+
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
29+
with:
30+
node-version: '20'
31+
32+
- name: Run Tests
33+
working-directory: .github/scripts/review-sync
34+
run: npm test

0 commit comments

Comments
 (0)