Skip to content

Default workflows part of all repositories - #444

Open
sheplu wants to merge 1 commit into
masterfrom
rfc-define-core-workflows
Open

Default workflows part of all repositories#444
sheplu wants to merge 1 commit into
masterfrom
rfc-define-core-workflows

Conversation

@sheplu

Copy link
Copy Markdown
Member

RFC to standardize the minimal set of workflows expected on all repositories

- Which Node.js versions must be tested by default? (e.g., 22 + 24 vs 18 + 20 + 22 + LTS)
- Should push validation run on all branches or exclude `main`?
- Naming convention for workflows (`ci.yml`, `test.yml`, `validate.yml`)?
- Should `npm audit` or dependency checks be mandatory or optional?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It definitely should be optional. All our dependencies are our own, and adding npm audit will only create noise in the workflow

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It’s not noise if it alerts about unaddressed CVEs tho

@sheplu
shepluforce-pushed the rfc-define-core-workflows branch from 46eaef6 to 7c0d0cbCompareDecember 3, 2025 20:20
@sheplu

Copy link
Copy Markdown
MemberAuthor

@expressjs/express-tc to be reviewed, definitely not priority 1 but this can spark a few discussion about the minimal requirement for all repos

@github-actionsgithub-actionsBot mentioned this pull request Apr 7, 2026
@github-actionsgithub-actionsBot mentioned this pull request May 5, 2026
@github-actionsgithub-actionsBot mentioned this pull request Jun 2, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@sheplu@ljharb@bjohansebas