From c84270490f287d8682cf89e6c67875a05e15ad42 Mon Sep 17 00:00:00 2001 From: Dafydd Jones Date: Thu, 26 Feb 2026 15:04:10 +0000 Subject: [PATCH] chore(copier): apply template `copier-safe-settings` at v1.1.0 * deploy `safe-settings` using the test environment unless deploying from the default branch (main/master) * Note: the tool pulls the settings from the default branch always, so this is only a partial improvement in security/safety --- .copier-answers.safe-settings.yml | 3 +++ .github/workflows/safe-settings.yml | 1 + 2 files changed, 4 insertions(+) create mode 100644 .copier-answers.safe-settings.yml diff --git a/.copier-answers.safe-settings.yml b/.copier-answers.safe-settings.yml new file mode 100644 index 0000000..c05f9f3 --- /dev/null +++ b/.copier-answers.safe-settings.yml @@ -0,0 +1,3 @@ +# Changes here will be overwritten by Copier; NEVER EDIT MANUALLY +_commit: v1.1.0 +_src_path: https://github.com/dafyddj/copier-safe-settings diff --git a/.github/workflows/safe-settings.yml b/.github/workflows/safe-settings.yml index 0b68ad2..1b763bf 100644 --- a/.github/workflows/safe-settings.yml +++ b/.github/workflows/safe-settings.yml @@ -15,6 +15,7 @@ jobs: permissions: contents: read runs-on: ubuntu-24.04 + environment: ${{ github.ref_name == github.event.repository.default_branch && 'production' || 'test' }} env: # Version/tag of `github/safe-settings` repository to use: SAFE_SETTINGS_VERSION: ff7a65655d33006b9820479df0a9e1057a8927e4 # 2.1.17