mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-07-16 14:52:35 -05:00
45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
name: Dependency Checks
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- frontend/pnpm-lock.yaml
|
|
- desktop/pnpm-lock.yaml
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
diff_dependencies:
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
directory: [frontend, desktop]
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Create Diff
|
|
uses: e18e/action-dependency-diff@8e9b8c1957ab066d36235a43f4c1ff1522e1bdbc # v1.6.1
|
|
with:
|
|
working-directory: ${{ matrix.directory }}
|
|
duplicate-threshold: 9999
|
|
|
|
check-provenance:
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
directory: [frontend, desktop]
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Check provenance downgrades
|
|
uses: danielroe/provenance-action@97ee003d615492a894bc672aefd5cc149fde798d # main
|
|
with:
|
|
workspace-path: ${{ matrix.directory }}
|
|
fail-on-provenance-change: true
|