ci: Update per Q3 audit findings (#3194)

* ci: Update per Q3 audit findings Signed-off-by: Mihail Mihov <[email protected]> * ci: Disable npm cache Signed-off-by: Mihail Mihov <[email protected]> --------- Signed-off-by: Mihail Mihov <[email protected]>
hashgraph · Nov 5, 2024 · 74a93bc · 74a93bc
1 parent 0736e01
commit 74a93bc
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -25,8 +25,8 @@
 # NOTE: Must be placed last to ensure enforcement over all other rules
 
 # Protection Rules for Github Configuration Files and Actions Workflows
-/.github/                                       @hashgraph/release-engineering @hashgraph/release-engineering-managers
-/.github/workflows/                             @hashgraph/release-engineering @hashgraph/release-engineering-managers @AlfredoG87 @ebadiere @Nana-EC @hashgraph/hedera-smart-contracts-product
+/.github/                                       @hashgraph/devops-ci @hashgraph/devops-ci-committers @hashgraph/release-engineering @hashgraph/release-engineering-managers
+/.github/workflows/                             @hashgraph/devops-ci @hashgraph/devops-ci-committers @hashgraph/release-engineering @hashgraph/release-engineering-managers @AlfredoG87 @ebadiere @Nana-EC @hashgraph/hedera-smart-contracts-product
 
 # Self-protection for root CODEOWNERS files (this file should not exist and should definitely require approval)
 /CODEOWNERS                                     @hashgraph/release-engineering @hashgraph/release-engineering-managers

diff --git a/.github/workflows/dapp.yml b/.github/workflows/dapp.yml
@@ -34,8 +34,8 @@ jobs:
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version: 20
-          cache: "npm"
-          cache-dependency-path: "**/package-lock.json"
+          #cache: "npm" Disabling this as it causes the workflow to hang, trying to retrieve the cache. Not removing it, because it could be retuned in the future.
+          #cache-dependency-path: "**/package-lock.json"
 
       - name: Install build tools
         run: sudo apt-get update && sudo apt-get install -y make gcc g++