3 ms·
Isn't that wrong? I think you have to pre-bundle your actions, it won't do an npm install.
by sureIy 2y ago
Isn't that wrong? I think you have to pre-bundle your actions, it won't do an npm install.
- mikepurvis 2y agoI set up this recently at a new company and did yarn + ncc to build a compiled js out of typescript. It was a bit hairy as a novice, but ended up working fine. That protects from npm supply chain stuff, but obviously third-party includes like docker/build-push-action are still a risk.