Skip to content

GH Actions Readiness#12

Open
MaximHammer wants to merge 10 commits into
mainfrom
gh-actions-ready
Open

GH Actions Readiness#12
MaximHammer wants to merge 10 commits into
mainfrom
gh-actions-ready

Conversation

@MaximHammer
Copy link
Copy Markdown
Contributor

@MaximHammer MaximHammer commented May 13, 2026

  • Pin npm dependencies
  • Pin all PyPI dependencies
  • Pin GH Actions to SHAs
  • Run security review
  • uv.lock, make usage etc
  • split dev & project dependencies

Follow ups:

  • discuss and address security review
  • gha updates handling
  • docs publish workflow
  • update code owners
  • branch protect settings review
  • review PyPi publish step

@MaximHammer MaximHammer requested a review from a team as a code owner May 13, 2026 11:04
id-token: write
contents: read
pull-requests: write
id-token: write
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this id-token: write has to be moved to the test job
https://docs.google.com/document/d/1J50oKQxG9WhGXWEl5zlbCq5pf9AGh57yDhZh9nxCQC0/edit?tab=t.0

similar to this
jobs:
integration:
permissions:
# Access to the integration testing infrastructure.
id-token: write
# Write test results to the PR.
pull-requests: write

Copy link
Copy Markdown
Collaborator

@adefabian adefabian left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Other than the id-token stuff looks good to me

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants