Skip to content
Lockdown untrusted workflows

fix(release): remove npm provenance for new packages #44

Sign in to view logs

fix(release): remove npm provenance for new packages

fix(release): remove npm provenance for new packages #44

Triggered via push February 8, 2024 09:09
@HQarroumHQarroum
pushed b9d9aad
main
Status Success
Total duration 14s
Artifacts –

on-workflow-update.yml

on: push
Harden Security
5s
Harden Security
Fit to window
Zoom out
Zoom in

Annotations

4 warnings
Harden Security
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: zgosalvez/github-actions-ensure-sha-pinned-actions@f32435541e24cd6a4700a7f52bb2ec59e80603b1. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Harden Security
The "lint" job of the "on-push.yml" workflow does not contain uses or steps.
Harden Security
The "security-checks" job of the "on-push.yml" workflow does not contain uses or steps.
Harden Security
The "build-and-test" job of the "on-push.yml" workflow does not contain uses or steps.