feat: add TSS-7 mechanical check for bypassed auth helpers #11
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: TSS-2 Bundle Leak Check | |
| on: | |
| push: | |
| branches-ignore: | |
| - main | |
| jobs: | |
| check-tss-2: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: oven-sh/setup-bun@v1 | |
| with: | |
| bun-version: latest | |
| # No need to `bun install` — the script only uses grep + ripgrep + bash. | |
| # ubuntu-latest ships with ripgrep preinstalled (verified via runner-images). | |
| - name: TSS-2 bundle-leak check | |
| run: bun run check-tss-2 |