Skip to content

v0.6.1 - hardening release

Choose a tag to compare

View all tags
@PerryLink PerryLink released this 16 Aug 12:41
· 18 commits to main since this release
v0.6.1
21785bc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.6.1 - local-machine protection

  • action-patch.mjs and action-post.mjs now refuse to run outside a GitHub Actions runner (no RUNNER_TEMP / GITHUB_WORKSPACE) - the action can never write profile overlays or reports into unknown local locations.
  • New scripts/local-test.mjs: a fully isolated local simulator. DSH_HOME, DSH_PROFILE_DIR, RUNNER_TEMP, and the output directory are hardcoded under a fresh %TEMP%/dsh-github-local-* sandbox for every spawned step (overriding any inherited, e.g. machine-scope, DSH_HOME), and it replays the action.yml steps: install -> prepare -> headless run -> post.
  • Regression tests for the guards in test/action-guard.test.ts; local-testing notes in all five READMEs.

Install channels:

Channel Command
npm dsh plugin --profile <name> add @perrylink/dsh-github
tarball download dsh-github-0.6.1.tgz below, then dsh plugin --profile <name> add ./dsh-github-0.6.1.tgz
git dsh plugin --profile <name> add github:PerryLink/dsh-github#v0.6.1
Assets 3
Loading