#1408 Fix - Prevent membership privilege escalation and open redirect after login #38

	name: Build Testable ZIP

	on:
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]
	branches: [develop]
	workflow_dispatch:

	jobs:
	zip:
	uses: themegrill/.github/.github/workflows/pr-build-zip.yml@master
	with:
	node-version: '20.x'
	php-version: '7.4'
	package-manager: pnpm
	# `pnpm exec grunt` needs grunt already in node_modules/.bin, so the
	# default `pnpm install` step must run first (left un-overridden).
	# grunt release:dev then does its OWN composer install (--no-dev) and a
	# second pnpm install internally (see Gruntfile.js) -- so we skip this
	# workflow's separate composer step to avoid doing it twice.
	composer-install: false
	build-command: pnpm exec grunt release:dev
	zip-glob: 'release/*.zip'
	artifacts-bucket: themegrill-pr-artifacts
	public-base-url: https://themegrill-pr-artifacts.s3.amazonaws.com
	s3-region: us-east-1
	# Cross-org call: this repo actually lives in themegrill (transferred
	# from wpeverest), and the reusable workflow lives in wpeverest/.github --
	# `secrets: inherit` cannot reach across that boundary reliably (same
	# issue confirmed on user-registration-pro: worked briefly right after
	# the transfer, then started failing with "Secret BOT_TOKEN is required,
	# but not provided" once GitHub's own org-membership check caught up).
	# Name every secret explicitly instead, same as every other themegrill repo.
	secrets:
	BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
	ARTIFACTS_KEY: ${{ secrets.ARTIFACTS_KEY }}
	ARTIFACTS_SECRET: ${{ secrets.ARTIFACTS_SECRET }}

Navigation Menu