From e59df476da1d27255a40a57e0322377c91793a51 Mon Sep 17 00:00:00 2001 From: Frederic Egmorte Date: Fri, 15 May 2026 15:47:04 +0200 Subject: [PATCH 1/3] ci: add safe-chain in ci --- .github/workflows/npm-release.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/npm-release.yml b/.github/workflows/npm-release.yml index c64ccba5a5..627eaeeb43 100644 --- a/.github/workflows/npm-release.yml +++ b/.github/workflows/npm-release.yml @@ -43,6 +43,9 @@ jobs: with: node-version: 20 + - name: Install safe-chain + run: curl -fsSL https://github.com/AikidoSec/safe-chain/releases/download/1.5.3/install-safe-chain.sh | sh -s -- --ci + - name: Update npm run: npm install -g npm@11.7.0 From a9c04e4048dc292d94e9e2935c193e23cb12e716 Mon Sep 17 00:00:00 2001 From: Frederic Egmorte Date: Fri, 15 May 2026 15:58:41 +0200 Subject: [PATCH 2/3] ci: add safe-chain in ci --- .github/workflows/main.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 075a90f6e1..57c72fb150 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -218,6 +218,8 @@ jobs: - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false + - name: Install safe-chain + run: curl -fsSL https://github.com/AikidoSec/safe-chain/releases/download/1.5.3/install-safe-chain.sh | sh -s -- --ci - run: python3 -m pip install linkcheckmd - name: Check dead-link run: python3 ci/scripts/local_docs_link_check.py From c60ed96cc8afdc6840bcb550a8085b1e141045b1 Mon Sep 17 00:00:00 2001 From: Fred Date: Fri, 22 May 2026 09:45:23 +0200 Subject: [PATCH 3/3] Update .github/workflows/main.yml Co-authored-by: David --- .github/workflows/main.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index c2fd4df22e..261beed14f 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -229,6 +229,7 @@ jobs: with: persist-credentials: false - name: Install safe-chain +# Safe-chain proxies npm and python package installs and checks for malware. Defense against supply-chain attacks. run: curl -fsSL https://github.com/AikidoSec/safe-chain/releases/download/1.5.3/install-safe-chain.sh | sh -s -- --ci - run: python3 -m pip install linkcheckmd - name: Check dead-link