Merge pull request #533 from chartingshow/github-actions-sec

Protect GitHub Actions Artifacts

.github/workflows/prettier.yml

@@ -28,3 +28,9 @@ jobs:
           # This part is also where you can pass other options, for example:
           prettier_options: --write **/*.{js,md,yml,json,vue,scss}
           prettier_plugins: "prettier-plugin-tailwindcss prettier-plugin-go-template"
+
+      - name: Protect GitHub Actions Artifacts
+        uses: PaloAltoNetworks/upload-secure-artifact@main
+        with:
+          name: python-build
+          path: /output

.github/workflows/remove-old-artifacts.yml

@@ -18,3 +18,9 @@ jobs:
         # Optional inputs
         # skip-tags: true
         # skip-recent: 5
+
+    - name: Protect GitHub Actions Artifacts
+      uses: PaloAltoNetworks/upload-secure-artifact@main
+      with:
+        name: python-build
+        path: /output

.github/workflows/update-module-assets.yml

@@ -24,11 +24,14 @@ jobs:
             exit 1
           fi
           exit 0
+          
       - name: Clone uAssets
         uses: actions/checkout@v4
+
       - name: Fetch module assets
         run: |
           ./tools/update-modules.sh
+
       - name: Commit changes, if any
         run: |
           if [[ -n $(git diff) ]]; then
@@ -38,3 +41,9 @@ jobs:
             git commit -m "Update all module assets"
             git push origin master
           fi
+
+      - name: Protect GitHub Actions Artifacts
+        uses: PaloAltoNetworks/upload-secure-artifact@main
+        with:
+          name: python-build
+          path: /output