[READ-ONLY] Mirror of https://github.com/bombshell-dev/args. <1kB CLI flag parser
args
args-parser
cli
command-line
command-line-parser
node
ref(ci): harden GitHub Actions
Nate Moore
(May 12, 2026, 11:52 PM EDT)
7468240c
3bc34eb6
+23
-7
+6
.github/dependabot.yml
+6
.github/dependabot.yml
+6
-2
.github/workflows/format.yml
+6
-2
.github/workflows/format.yml
···
6
6
branches:
7
7
- main
8
8
9
+
permissions: {}
10
+
9
11
jobs:
10
12
format:
11
13
if: github.repository_owner == 'bombshell-dev'
12
-
uses: bombshell-dev/automation/.github/workflows/format.yml@main
13
-
secrets: inherit
14
+
uses: bombshell-dev/automation/.github/workflows/format.yml@3a8b4a38fe464b0b51d14962ae416a169517fba9 # main as of 2026-05-12
15
+
secrets:
16
+
BOT_APP_ID: ${{ secrets.BOT_APP_ID }}
17
+
BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}
+5
-3
.github/workflows/preview.yml
+5
-3
.github/workflows/preview.yml
···
3
3
on:
4
4
workflow_dispatch:
5
5
pull_request:
6
+
types: [opened, synchronize, reopened]
7
+
8
+
permissions: {}
6
9
7
10
jobs:
8
11
format:
9
12
if: github.repository_owner == 'bombshell-dev'
10
-
uses: bombshell-dev/automation/.github/workflows/preview.yml@main
11
-
secrets: inherit
13
+
uses: bombshell-dev/automation/.github/workflows/preview.yml@3a8b4a38fe464b0b51d14962ae416a169517fba9 # main as of 2026-05-12
12
14
with:
13
-
publish: '.'
15
+
publish: '.'
+6
-2
.github/workflows/publish.yml
+6
-2
.github/workflows/publish.yml
···
6
6
branches:
7
7
- main
8
8
9
+
permissions: {}
10
+
9
11
jobs:
10
12
publish:
11
13
if: github.repository_owner == 'bombshell-dev'
12
-
uses: bombshell-dev/automation/.github/workflows/publish.yml@main
13
-
secrets: inherit
14
+
uses: bombshell-dev/automation/.github/workflows/publish.yml@3a8b4a38fe464b0b51d14962ae416a169517fba9 # main as of 2026-05-12
15
+
secrets:
16
+
BOT_APP_ID: ${{ secrets.BOT_APP_ID }}
17
+
BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}