Skip to content

Conversation

@pandeymangg
Copy link
Contributor

Hardened the actions for test, build, release and sonarqube

@sonarqubecloud
Copy link

sonarqubecloud bot commented Oct 1, 2025

@pandeymangg pandeymangg requested a review from Dhruwang October 1, 2025 06:46
@coderabbitai
Copy link

coderabbitai bot commented Oct 1, 2025

Walkthrough

Across build, test, and SonarQube workflows, a pre-checkout hardening step using step-security/harden-runner (egress-policy: audit) was added. actions/checkout, actions/setup-node, and pnpm/action-setup were updated to pinned commit SHAs. In the release workflow, the trigger changed from published to released, a job name and 30-minute timeout were added, id-token permission was retained with a clarifying comment, pnpm cache and always-auth were enabled, and npm publish includes provenance. No exported/public APIs changed.

Pre-merge checks

✅ Passed checks (3 passed)
Check name Status Explanation
Title Check ✅ Passed The title "fix: harden the actions" succinctly identifies the primary change of hardening the GitHub Actions workflows using conventional commit style and accurately reflects the pull request’s main purpose without extraneous detail.
Description Check ✅ Passed The description clearly states that the workflows for test, build, release, and SonarQube have been hardened, directly relating to the changeset and providing appropriate context for reviewers.
Docstring Coverage ✅ Passed No functions found in the changes. Docstring coverage check skipped.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 28b7403 and 1790adc.

📒 Files selected for processing (4)
  • .github/workflows/build.yml (1 hunks)
  • .github/workflows/release.yml (1 hunks)
  • .github/workflows/sonarqube.yml (1 hunks)
  • .github/workflows/test.yml (1 hunks)

@pandeymangg pandeymangg added this pull request to the merge queue Oct 1, 2025
Merged via the queue into main with commit 39761d4 Oct 1, 2025
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants