From 14dd0f6b56f11decf0c9201485b6bab3234e1981 Mon Sep 17 00:00:00 2001 From: jamesread Date: Tue, 19 May 2026 22:03:30 +0100 Subject: [PATCH] chore: try to defend against cache poisoning in PR --- .github/workflows/build-and-release.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml index 3e15b90..5d57246 100644 --- a/.github/workflows/build-and-release.yml +++ b/.github/workflows/build-and-release.yml @@ -28,12 +28,17 @@ jobs: image: tonistiigi/binfmt:latest platforms: arm64,arm - - name: Setup node + - name: Setup node (npm cache) + if: github.event_name != 'pull_request' uses: actions/setup-node@v6.4.0 with: cache: 'npm' cache-dependency-path: frontend/package-lock.json + - name: Setup node + if: github.event_name == 'pull_request' + uses: actions/setup-node@v6.4.0 + - name: Setup Go uses: actions/setup-go@v6 with: