You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| CLEAN_TARGETS | Files or directories to clean before release (Comma separated)<br>Absolute path and `..` are not permitted to use.<br>[More details of execute command](#execute-commands) | `.[!.]*,__tests__,docs,src,*.js,*.ts,*.json,*.lock,*.yml,*.yaml` | true | `.[!.]*,*.txt` |
75
+
| CLEAN_TARGETS | Files or directories to clean before release (Comma separated)<br>Absolute path and `..` are not permitted to use.<br>[More details of execute command](#execute-commands) | `.[!.]*,__tests__,docs,src,*.[jt]s,*.[mc][jt]s,*.json,*.lock,*.yml,*.yaml` | true | `.[!.]*,*.txt` |
76
76
| PACKAGE_MANAGER | Package manager to use to install dependencies<br>If there is `yarn.lock` or` package-lock.json`, the action automatically determines the package manager to use, but this option can be used to specify it explicitly.<br>(`npm` or `yarn`) | | | `yarn` |
The default setting assumes the use of `Action template for TypeScript` or `Action template for JavaScript`.
137
-
https://github.com/actions/typescript-action
138
-
https://github.com/actions/javascript-action
139
-
140
-
However, these templates have security issues etc, you must do the following.
141
-
142
-
#### Action template for JavaScript
143
-
144
-
If a pull request includes a built file, it is highly likely that even malicious code will be missed in a review, so you need to fix `.gitignore` as follows:
145
-
146
-
`.gitignore`
147
-
```diff
148
-
+ /dist
149
-
```
150
-
151
-
#### Action template for TypeScript
152
-
153
-
Since processing by `ncc` is unnecessary, delete the related commands and packages and modify `action.yml` to use script built with `tsc`.
0 commit comments