8aba048b49
The "Sync Labels" workflow was originally developed with Arduino firmware repositories in mind. Those projects don't have a lot of existing infrastructure and, since they are intended to be very approachable, the impact of adding additional non-firmware files or folders (especially in the root) must be carefully considered. In that context, a self-contained workflow is desirable. However, the situation is different in the inherently more complex and infrastructure rich tooling projects, which are typically consumed only as a binary by users. For this reason, an alternative standardized version of the "Sync Labels" workflow was produced, which utilizes npm to manage its tool dependencies. The code dependencies of this project and the code infrastructure are already managed via npm, which means the switch to this superior version of the workflow can be made without the need to add any additional infrastructure. This provides some significant benefits: - Controlled updates via Dependabot PRs instead of being subject to immediate breakage resulting from a new tool release - Enables automated vulnerability alerts This is especially important for the github-label-sync tool, since it is making irreversible writes to the GitHub repository.
arduino/setup-task
A GitHub Actions action that makes the Task task runner / build tool available to use in your workflow.
Inputs
version
The version of Task to install.
Can be an exact version (e.g., 3.4.2) or a version range (e.g., 3.x).
Default: 3.x
repo-token
(Optional) GitHub access token used for GitHub API requests. Heavy usage of the action can result in workflow run failures caused by rate limiting. GitHub provides a more generous allowance for Authenticated API requests.
It will be convenient to use ${{ secrets.GITHUB_TOKEN }}.
Usage
To get the action's default version of Task just add this step:
- name: Install Task
uses: arduino/setup-task@v1
If you want to pin a major or minor version you can use the .x wildcard:
- name: Install Task
uses: arduino/setup-task@v1
with:
version: 2.x
To pin the exact version:
- name: Install Task
uses: arduino/setup-task@v1
with:
version: 2.6.1
Security
If you think you found a vulnerability or other security-related bug in this project, please read our security policy and report the bug to our Security Team 🛡️ Thank you!
e-mail contact: security@arduino.cc