5 ms·
Wouldn't the dropper get executed once tests are run within CI though?
by JustSkyfall 1mo ago
Wouldn't the dropper get executed once tests are run within CI though?
- jitl 1mo agoyeah, or when a dev starts the local development server (unless that server is containerized).
- insanitybit 1mo agoDev laptops tend to have better monitoring than CI/CD so I still think this is a better option. You can also have devs use VMs or separate dev environments like an ec2 instance. To be clear, just solving the CI/CD portion is insufficient, but it is a massive win.
- insanitybit 1mo agoYes, you should separate "tests execute" into their own unprivileged workflows that don't have "deploy" secrets.
- rcxdude 1mo agoYou can also do the same for the build workflow, no?
- insanitybit 1mo agoYep, I'd recommend it.