Maintenance: refactor versioning process #2046
Labels
automation
This item relates to automation
completed
This item is complete and has been merged/shipped
internal
PRs that introduce changes in governance, tech debt and chores (linting setup, baseline, etc.)
Summary
At the moment we have a single workflow that versions and publishes the packages to npm.
We should break down the workflows into two or more separate ones, possibly with human review at different steps.
Why is this needed?
To improve the visibility and security of each step.
we should also take this opportunity review the permissions associated with each step to make sure they apply the principle of least responsibility.
Which area does this relate to?
Automation
Solution
No response
Acknowledgment
Future readers
Please react with 👍 and your use case to help us understand customer demand.
The text was updated successfully, but these errors were encountered: