mirror of
https://github.com/microsoft/vscode.git
synced 2026-08-18 21:36:52 +01:00
e4124f7635
* Pin GitHub Actions to full-length commit SHAs * chore: attest to third-party action pinning changes I have reviewed the action-pinning diff authored by OssSecurityBot and verified that each pinned SHA resolves to the same commit the tag it replaces pointed at, and that no workflow logic was altered beyond the `uses:` references. This commit is signed with my key from security/trusted-signing-keys.csv so the attestation is bound to my identity and to this exact tree. Any subsequent push replaces the head and invalidates it. Refs #328868 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: OssSecurityBot <oss-security-bot@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
22 lines
686 B
YAML
22 lines
686 B
YAML
name: Save node_modules cache
|
|
description: Archives node_modules and saves the archive to the GitHub Actions cache.
|
|
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- name: Create node_modules archive
|
|
if: runner.os != 'Windows'
|
|
shell: bash
|
|
run: ./.github/workflows/node_modules_cache/cache.sh archive
|
|
|
|
- name: Create node_modules archive
|
|
if: runner.os == 'Windows'
|
|
shell: pwsh
|
|
run: ./.github/workflows/node_modules_cache/cache.ps1 archive
|
|
|
|
- name: Save node_modules cache
|
|
uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
|
|
with:
|
|
path: .build/node_modules_cache
|
|
key: ${{ env.NODE_MODULES_CACHE_KEY }}
|