fix(security): never persist the OAuth access token (v0.1.2) #14
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| push: | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| build-test: | |
| runs-on: ubuntu-latest | |
| # Node 20 excluded: `node --test "tests/*.test.ts"` needs test-runner glob | |
| # support (Node 21+) and TS type-stripping (Node 22.6+, default-on in late | |
| # 22.x). The suite is TypeScript importing compiled dist output. | |
| strategy: | |
| matrix: | |
| node: [22, 24] | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| cache: npm | |
| - run: npm ci | |
| - run: npm run build | |
| - run: npm test |