Skip to content

Commit afee198

Browse files
committed
ci: drop npm cache from the docs publish workflow
The publish job has contents: write and triggers a deploy, so restoring an npm cache that a lower-privileged run could populate is a cache-poisoning vector. The cache only saved re-downloading the mintlify CLI on a tag-triggered workflow, so dropping it costs almost nothing.
1 parent 6e3cad1 commit afee198

1 file changed

Lines changed: 0 additions & 10 deletions

File tree

.github/workflows/publish-docs.yml

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -22,16 +22,6 @@ jobs:
2222
with:
2323
persist-credentials: false
2424

25-
- name: 📦 Cache npm
26-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
27-
with:
28-
path: |
29-
~/.npm
30-
key: |
31-
${{ runner.os }}-mintlify
32-
restore-keys: |
33-
${{ runner.os }}-mintlify
34-
3525
- name: 🔗 Check for broken links
3626
working-directory: ./docs
3727
run: npx mintlify@4.0.393 broken-links

0 commit comments

Comments
 (0)