-
Notifications
You must be signed in to change notification settings - Fork 14
Tauri #19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Tauri #19
Changes from all commits
c5493e5
720c86e
efb5813
74e0d6f
c5cf945
53093b7
d156a67
5dc2fbb
711ae97
d0c3d1c
ca16792
5d65ecb
d5e1ab5
0c3ae96
7ee3b36
49a9742
541c0e5
4f69a65
4c22e3f
9cf2902
87f6ddf
7de9374
3ffafec
8230634
26ea7ad
83a61b9
6d42563
00b2cdd
a7b4dee
f2b06a7
94c0d1e
cd0d6bc
81fd736
e0313f0
34a8d6e
e2e7b6c
967cabe
08d9fbf
5572e16
fdd4b84
9063a9a
b3c227f
a6d4b1a
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -35,6 +35,11 @@ jobs: | |
| restore-keys: | | ||
| ${{ runner.os }}-pr- | ||
|
|
||
| - name: Install system dependencies | ||
| run: | | ||
| sudo apt-get update | ||
| sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf | ||
|
|
||
| - name: Install dependencies | ||
| run: bun install | ||
|
|
||
|
|
@@ -51,7 +56,7 @@ jobs: | |
| run: bun run typecheck | ||
|
|
||
| - name: Run tests | ||
| run: bun test | ||
| run: npm test | ||
|
|
||
|
Comment on lines
58
to
60
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 💡 Verification agent 🧩 Analysis chainMixed package managers may break lock-file determinism Dependencies are installed with
- name: Setup Node
uses: actions/setup-node@v4
with:
node-version: "20"
- name: Install JS deps (npm)
run: npm ciPick one approach to keep a single source-of-truth. 🏁 Script executed: #!/bin/bash
# Check for bun install in the workflow
grep -R "run: *bun install" -n .github/workflows/pr-validation.yml || echo "no bun install step found"
# Check for bun test in the workflow
grep -R "run: *bun test" -n .github/workflows/pr-validation.yml || echo "no bun test step found"
# Confirm npm test is present
grep -R "run: *npm test" -n .github/workflows/pr-validation.yml || echo "no npm test step found"
# Check if a package-lock.json is tracked at repo root
if [ -f package-lock.json ]; then
echo "package-lock.json exists"
else
echo "no package-lock.json"
fiLength of output: 390 Ensure a single package manager in CI to keep lock-file determinism Your workflow currently installs deps with Bun (line 44) but runs tests with npm (line 59), and there’s no • Switch to Bun for testing: • Or standardize on npm: Locations to update:
🧰 Tools🪛 YAMLlint (1.37.1)[error] 60-60: trailing spaces (trailing-spaces) 🤖 Prompt for AI Agents |
||
| - name: Build check | ||
| run: | | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🛠️ Refactor suggestion
Secrets exposed to entire job
Setting
GITHUB_TOKENand signing keys at the job level exposes them to every subsequent step. Restrict to the step that actually needs them (the Tauri build) to minimise leakage surface:📝 Committable suggestion
🤖 Prompt for AI Agents