mirror of
https://github.com/twentyhq/twenty.git
synced 2026-06-12 09:57:03 -04:00
- Pin all third-party actions to SHA - Gate claude.yml triggers to internal authors with Harden-Runner egress audit - Ignore fork-PR lifecycle scripts - Narrow cross-repo dispatch payloads - Add 7d npm release-age gate - Add CODEOWNERS on .github/** and .yarnrc.yml --------- Co-authored-by: prastoin <paul@twenty.com>
24 lines
824 B
YAML
24 lines
824 B
YAML
name: Save cache
|
|
inputs:
|
|
key:
|
|
required: true
|
|
description: Primary key to the cache, should be retrieved from `cache-restore` composite action outputs.
|
|
additional-paths:
|
|
required: false
|
|
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
# Fork PRs on pull_request already can't write to the base repo's cache (GitHub built-in).
|
|
# The fork guard is defense-in-depth for pull_request_target, which does have write access.
|
|
- name: Save cache
|
|
if: ${{ format('{0}', github.event.pull_request.head.repo.fork) != 'true' }}
|
|
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 (save)
|
|
with:
|
|
key: ${{ inputs.key }}
|
|
path: |
|
|
.cache
|
|
.nx
|
|
node_modules/.cache
|
|
packages/*/node_modules/.cache
|
|
${{ inputs.additional-paths }} |