Merge pull request #128 from notpeelz/harden-ci-security

Vendor publish-release CI action
Add ensure-sha-pinned-actions action to CI pipeline
Pin CI actions to specific commit hashes

.github/actions/github-release/.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+
+[*.{json,yml}]
+indent_style = space
+indent_size = 2
+
+[*.{js,cjs,mjs,jsx,ts,tsx}]
+indent_style = space
+indent_size = 2
+max_line_length = 100

.github/actions/github-release/.nvmrc

@@ -0,0 +1 @@
+lts/gallium

.github/actions/github-release/.prettierrc.cjs

@@ -0,0 +1,9 @@
+/** @type {import("prettier").Config} */
+module.exports = {
+  editorconfig: true,
+  singleQuote: false,
+  jsxSingleQuote: false,
+  arrowParens: "always",
+  trailingComma: "all",
+  bracketSameLine: false,
+};

.github/actions/github-release/.vscode/extensions.json

@@ -0,0 +1,6 @@
+{
+  "recommendations": [
+    "arcanis.vscode-zipfs",
+    "esbenp.prettier-vscode"
+  ]
+}

.github/actions/github-release/.vscode/settings.json

@@ -0,0 +1,9 @@
+{
+  "search.exclude": {
+    "**/.yarn": true,
+    "**/.pnp.*": true
+  },
+  "typescript.tsdk": ".yarn/sdks/typescript/lib",
+  "typescript.enablePromptUseWorkspaceTsdk": true,
+  "prettier.prettierPath": ".yarn/sdks/prettier/index.js"
+}