MetaMask / MetaMask/create-release-branch

GitHub workflows are out of date

Open
#183 0 comments 0 reactions 0 assignees View on GitHub
team-core-platform
Dominant language
TypeScript
Stars
9
Forks
7
Avg merge
51m
Merged PRs (30d)
2

Description

The GitHub workflows in this repo do not align with the module template. Specifically, `actions/cache` is still being used in an unsafe manner (we should be using the `checkout-and-setup` action).

This should fix:

- https://github.com/MetaMask/create-release-branch/security/code-scanning/6
- https://github.com/MetaMask/create-release-branch/security/code-scanning/5
- https://github.com/MetaMask/create-release-branch/security/code-scanning/4

## Acceptance Criteria

- `.github/workflows` in this repo matches the same directory in the module template.
- The Dependabot config should match the module template.
- The pull request template should match the module template (minus the final section).

Contributor guide

No contributing guide indexed for this repository

Research direction

Compare `.github/workflows`, the Dependabot config, and the pull request template with the module template, starting with the unsafe `actions/cache` usage and the `checkout-and-setup` action. Done means those areas match the module template, except for the final section of the pull request template, and the listed code-scanning findings are addressed.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.