Skip to content

[StepSecurity] Apply security best practices #93

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rrichardson-uw merged 1 commit into from
Apr 29, 2026

[StepSecurity] Apply security best practices

6ca2129
Select commit
Loading
Failed to load commit list.
Merged

[StepSecurity] Apply security best practices #93

[StepSecurity] Apply security best practices
6ca2129
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Apr 29, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR

Details

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

View more details on StepSecurity Actions Security