GitHub Actions

GitHub Actions

There are a few main GitHub actions involved with this repository.

1. PR Build
   1. Runs for any Pull requests and has read-only permissions to the repository for security.
2. CI Build
   1. Once a PR is signed off and committed a formal CI build is begun. This build has limited permissions as it does not update the repository
3. Release build
   1. This is a build of the actual binaries released. It has full permissions as it needs to update the state of the repository, including publication of the final GitHub release for the repo.

Test Results

In addition to the three main actions a 4th action will analyze the test results produced from the PR and CI runs to post a comment with the test results. This is done as a distinct action so that it operates with permissions needed to write the comment but has no dependencies on the source changes (only the test results it analyzes). This prevents a PR from needing/abusing elevated privileges.