MetaMask / MetaMask/create-release-branch
GitHub workflows are out of date
- Dominant language
- TypeScript
- Stars
- 9
- Forks
- 7
- Avg merge
- 51m
- Merged PRs (30d)
- 2
Description
The GitHub workflows in this repo do not align with the module template. Specifically, `actions/cache` is still being used in an unsafe manner (we should be using the `checkout-and-setup` action).
This should fix:
- https://github.com/MetaMask/create-release-branch/security/code-scanning/6
- https://github.com/MetaMask/create-release-branch/security/code-scanning/5
- https://github.com/MetaMask/create-release-branch/security/code-scanning/4
## Acceptance Criteria
- `.github/workflows` in this repo matches the same directory in the module template.
- The Dependabot config should match the module template.
- The pull request template should match the module template (minus the final section).
Contributor guide
No contributing guide indexed for this repository
Research direction
Compare `.github/workflows`, the Dependabot config, and the pull request template with the module template, starting with the unsafe `actions/cache` usage and the `checkout-and-setup` action. Done means those areas match the module template, except for the final section of the pull request template, and the listed code-scanning findings are addressed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100