Merge pull request #3 from sslava/workflows

add security md

Author: sslava

.github/workflows/ci.yml

@@ -1,4 +1,3 @@
-
 name: CI
 
 on: [push, pull_request]
@@ -17,34 +16,10 @@ jobs:
         with:
           node-version: ${{matrix.node}}
       - name: install dependencies
-        run: npm ci
+        run: yarn install
       - name: lint code
-        run: npm run lint
+        run: yarn lint
       - name: build project
-        run: npm run build
+        run: yarn build
       - name: run tests
-        run: npm run test
-      - name: coverage
-        uses: codecov/codecov-action@v4
-        if: github.actor != 'dependabot[bot]'
-        with:
-          fail_ci_if_error: true
-          verbose: false
-          token: ${{ secrets.CODECOV_TOKEN }}
-        env:
-          CI: true
-
-  release-preview:
-    runs-on: ubuntu-latest
-    needs: test
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22.0.0"
-      - name: install dependencies
-        run: npm ci
-      - name: build project
-        run: npm run build
-      - name: release preview with pkr-pr-new
-        run: npx pkg-pr-new publish
+        run: yarn test