#ZH-3 - Applying small improvements to and Actions

[israelboudoux]

Adds a dependency-check to Action which verifies for vulnerabilities on dependencies and enables the use of WIP (Work in Progress) into PR titles.

[IlyasRidhuan]

Can you add a description to what this PR is meant to do? It looks like it adds a check for vulnerable dependencies.

What is it actually doing under the hood. Running nom audit in the repo raises multiple vulnerabilities, yet this workflow passes.

[israelboudoux]

Can you add a description to what this PR is meant to do? It looks like it adds a check for vulnerable dependencies.

What is it actually doing under the hood. Running nom audit in the repo raises multiple vulnerabilities, yet this workflow passes.

Short description added!
A double-check in vulnerabilities is never too much.

[ChaitanyaKonda]

How do the following work ?

• WIP
• uses: actions/[email protected]

[israelboudoux]

How do the following work ?

• WIP
• uses: actions/[email protected]

Hello Chaitanya,

• The WIP thing is related to making your Pull request pending, I mean, by putting one of the words "WIP", "Work in Progress", "Do not merge" in the title will make it pending and this prevents someone of reviewing it in advance;
• The dependency-check basically checks if new dependencies added in the PR run into vulnerabilities.

That is it!

[ChaitanyaKonda]

The WIP thing is related to making your Pull request pending, I mean, by putting one of the words "WIP", "Work in Progress", "Do not merge" in the title will make it pending and this prevents someone of reviewing it in advance;

Apologies if this might seem silly, what do you mean by Pending please. I am asking to understand how to use, it seems good to approve in general. I am sure David Ruiz or David Rodriguez will approve as soon as they see it

[IlyasRidhuan]

LGTM

[israelboudoux]

The WIP thing is related to making your Pull request pending, I mean, by putting one of the words "WIP", "Work in Progress", "Do not merge" in the title will make it pending and this prevents someone of reviewing it in advance;

Apologies if this might seem silly, what do you mean by Pending please. I am asking to understand how to use, it seems good to approve in general. I am sure David Ruiz or David Rodriguez will approve as soon as they see it

Nw! Basically speaking the Pending state put the PR in a state where the Merge button isn't enabled and only the Administrator could merge it.

[daveroga]

LGTM