chore: migrate PR check to GitHub Actions (#1190) #2
Annotations
9 errors, 30 warnings, and 3 notices
Test on macos-latest
Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found npm access token: npm_Ab3kZy0X9QpLmN4tUvW7aB... [npm]
src/test/fixtures/secrets/secret2.ts#1:19-1:59
In case of false positives, you can allow specific types of secrets with --allow-package-secrets npm or use --allow-package-all-secrets to skip this check entirely (not recommended).
|
Test on macos-latest
Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found private key: -----BEGIN OPENSSH PRIVATE KEY-... [privatekey]
src/test/fixtures/secrets/secret1.ts#2:1-9:34
In case of false positives, you can allow specific types of secrets with --allow-package-secrets privatekey or use --allow-package-all-secrets to skip this check entirely (not recommended).
|
Test on macos-latest
.env files should not be packaged. Do not include the file in your package.json files property.
To ignore this check, you can use --allow-package-env-file (not recommended).
|
Test on ubuntu-latest
Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found npm access token: npm_Ab3kZy0X9QpLmN4tUvW7aB... [npm]
src/test/fixtures/secrets/secret2.ts#1:19-1:59
In case of false positives, you can allow specific types of secrets with --allow-package-secrets npm or use --allow-package-all-secrets to skip this check entirely (not recommended).
|
Test on ubuntu-latest
Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found private key: -----BEGIN OPENSSH PRIVATE KEY-... [privatekey]
src/test/fixtures/secrets/secret1.ts#2:1-9:34
In case of false positives, you can allow specific types of secrets with --allow-package-secrets privatekey or use --allow-package-all-secrets to skip this check entirely (not recommended).
|
Test on ubuntu-latest
.env files should not be packaged. Do not include the file in your package.json files property.
To ignore this check, you can use --allow-package-env-file (not recommended).
|
Test on windows-latest
Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found npm access token: npm_Ab3kZy0X9QpLmN4tUvW7aB... [npm]
src\test\fixtures\secrets\secret2.ts#1:19-1:59
In case of false positives, you can allow specific types of secrets with --allow-package-secrets npm or use --allow-package-all-secrets to skip this check entirely (not recommended).
|
Test on windows-latest
Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found private key: -----BEGIN OPENSSH PRIVATE KEY-... [privatekey]
src\test\fixtures\secrets\secret1.ts#2:1-9:34
In case of false positives, you can allow specific types of secrets with --allow-package-secrets privatekey or use --allow-package-all-secrets to skip this check entirely (not recommended).
|
Test on windows-latest
.env files should not be packaged. Do not include the file in your package.json files property.
To ignore this check, you can use --allow-package-env-file (not recommended).
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on macos-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on ubuntu-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on ubuntu-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on windows-latest
LICENSE, LICENSE.md, or LICENSE.txt not found
|
Test on windows-latest
A 'repository' field is missing from the 'package.json' manifest file.
Use --allow-missing-repository to bypass.
|
Test on macos-latest
The macos-latest label will migrate to macOS 15 beginning August 4, 2025. For more information see https://github.com/actions/runner-images/issues/12520
|
Test on macos-latest
The macos-latest label will migrate to macOS 15 beginning August 4, 2025. For more information see https://github.com/actions/runner-images/issues/12520
|
Test on windows-latest
The windows-latest label will migrate from Windows Server 2022 to Windows Server 2025 beginning September 2, 2025. For more information see https://github.com/actions/runner-images/issues/12677
|