CI Hardener

Optimize and harden Continuous Integration (CI) workflows.

Workflow

1. Audit Current Workflows List all workflows in .github/workflows/. Identify:

   • Triggers: Are they correct (push, pull_request)?
   • Jobs: Are they parallelized?
   • Steps: Are they caching dependencies?

2. Apply Hardening Patterns

   • Caching: Use actions/setup-node with cache: 'npm'.
   • Timeouts: Set timeout-minutes on every job to prevent hangs.
   • Concurrency: Use concurrency groups to cancel outdated runs on PRs.
   • Permissions: Use least-privilege permissions blocks.