Skip to content

Commit

Permalink
README: re-add "pro tip" language
Browse files Browse the repository at this point in the history
Signed-off-by: William Woodruff <william@trailofbits.com>
  • Loading branch information
woodruffw committed Aug 9, 2023
1 parent 4864f13 commit 637917e
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,8 +63,8 @@ jobs:
```
> [!NOTE]
> Instead of using branch pointers, like `unstable/v1`, pin versions of Actions
> that you use to tagged versions or sha1 commit identifiers.
> Pro tip: instead of using branch pointers, like `unstable/v1`, pin versions of
> Actions that you use to tagged versions or sha1 commit identifiers.
> This will make your workflows more secure and better reproducible, saving you
> from sudden and unpleasant surprises.

Expand All @@ -79,7 +79,7 @@ Other indices that support trusted publishing can also be used, like TestPyPI:
_(don't forget to update the environment name to `testpypi` or similar!)_

> [!NOTE]
> Only set the `id-token: write` permission in the job that does
> Pro tip: only set the `id-token: write` permission in the job that does
> publishing, not globally. Also, try to separate building from publishing
> — this makes sure that any scripts maliciously injected into the build
> or test environment won't be able to elevate privileges while flying under
Expand Down Expand Up @@ -192,7 +192,7 @@ default) setting as follows:
```

> [!NOTE]
> Try to avoid enabling this setting where possible. If you
> Pro tip: try to avoid enabling this setting where possible. If you
> have steps for publishing to both PyPI and TestPyPI, consider only using
> it for the latter, having the former fail loudly on duplicates.

Expand Down

0 comments on commit 637917e

Please sign in to comment.