[Feature]: Enhancing the CI/CD pipeline

[FabLrc]

Search existing issues

• I have searched the existing issues

Is your feature request related to a problem?

No

Describe the solution you'd like

I think it would be interesting to improve the CI/CD pipeline with tests, audits, linters, etc.
I'm not an expert on this, so I'll leave it to others who are more comfortable with it, otherwise I can take care of setting up a basic pipeline.

What do you think?

Describe alternatives you've considered

No response

Additional context

No response

[FabLrc]

Here are some features I want to add in the workflow :

• Dependency verification
• Signing code on different OS
• Automatic releases
• Auto-update metadata (need to implement an auto-update feature too)
• Security checks, OpenSSF badge and verifications https://scorecard.dev/
• Conventionals commit checks

[siddharthvaddem]

I do not really have any strong opinion on this.

Automatic releases
I would lean toward no, because it is not really much different from running it locally.

Tbh, the thing I think I would find the most useful is pre-commit checks and linting. I don't want anything that is an overkill.

[siddharthvaddem]

I added a pre-commit check on linting, type check and any other errors and CI checks on the same as well. This should be a good starting point I suppose. If you strongly feel this project can benefit from adding something else that is not an huge overkill, feel free to discuss.

[FabLrc]

I completely understand your point of view, and I think you're absolutely right about not adding overkill features. The features you've added are a good starting point.
If I had to add one thing, it would be dependency auditing via a dependabot, for example, to avoid significant vulnerabilities. Electron applications can be a major security flaw for operating systems if dependencies are not up to date.
For my part, I would like to develop an automatic update feature when a new release comes out on GitHub, to allow users to download the latest version without having to re-download from GitHub. I'll make a PR at that point :)

[siddharthvaddem]

Sounds good