dependency-review-action icon indicating copy to clipboard operation
dependency-review-action copied to clipboard

Create a PR check for default values in action.yml

Open febuiles opened this issue 11 months ago • 0 comments

Recent changes inadvertently broke the external configuration capabilities of our Action by introducing default values in action.yml, as detailed in this pull request.

It's clear that merely commenting at the top of a file isn't sufficient to prevent these issues. To address this, I suggest implementing a check for every pull request that edits action.yml to ensure no new default values are added, except for the token. We can achieve this with either an NPM script or a shell command.

febuiles avatar Mar 22 '24 08:03 febuiles