forked from
npmx.dev/npmx.dev
[READ-ONLY]
a fast, modern browser for the npm registry
ci: add explicit perms and don't globally install corepack
+7
-4
+1
-1
.github/workflows/autofix.yml
+1
-1
.github/workflows/autofix.yml
+6
-3
.github/workflows/ci.yml
+6
-3
.github/workflows/ci.yml
···
8
8
branches:
9
9
- main
10
10
11
+
permissions:
12
+
contents: read
13
+
11
14
jobs:
12
15
lint:
13
16
runs-on: ubuntu-latest
14
17
15
18
steps:
16
19
- uses: actions/checkout@v6
17
-
- run: npm i -g --force corepack && corepack enable
20
+
- run: corepack enable
18
21
- uses: actions/setup-node@v6
19
22
with:
20
23
node-version: lts/*
···
31
34
32
35
steps:
33
36
- uses: actions/checkout@v6
34
-
- run: npm i -g --force corepack && corepack enable
37
+
- run: corepack enable
35
38
- uses: actions/setup-node@v6
36
39
with:
37
40
node-version: lts/*
···
59
62
60
63
steps:
61
64
- uses: actions/checkout@v6
62
-
- run: npm i -g --force corepack && corepack enable
65
+
- run: corepack enable
63
66
- uses: actions/setup-node@v6
64
67
with:
65
68
node-version: lts/*