Description
Summary
At the moment we have a single workflow that versions and publishes the packages to npm.
We should break down the workflows into two or more separate ones, possibly with human review at different steps.
Why is this needed?
To improve the visibility and security of each step.
we should also take this opportunity review the permissions associated with each step to make sure they apply the principle of least responsibility.
Which area does this relate to?
Automation
Solution
No response
Acknowledgment
- This request meets Powertools for AWS Lambda (TypeScript) Tenets
- Should this be considered in other Powertools for AWS Lambda languages? i.e. Python, Java, and .NET
Future readers
Please react with 👍 and your use case to help us understand customer demand.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Shipped