Create SECURITY.md #1887

	name: tests

	on: [push, pull_request]

	jobs:
	lint:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v2
	- uses: actions/setup-node@v2
	with:
	node-version: 16

	- name: NPM install
	run: npm ci

	- name: Check lint
	run: npm run lint

	- name: Check formatting
	run: npm run format && git diff --exit-code

	local:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v2
	- uses: actions/setup-node@v2
	with:
	node-version: 16

	- name: NPM install
	run: npm ci

	- name: Lerna bootstrap
	run: npm run bootstrap

	- name: Build
	run: npm run build

	- name: Test
	run: npm test

	sauce:
	# Skip if this is from a forked repository because we can't access Sauce
	# secrets.
	if: github.event.pull_request.base.repo.id == github.event.pull_request.head.repo.id

	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v2
	- uses: actions/setup-node@v2
	with:
	node-version: 16

	- name: NPM install
	run: npm ci

	- name: Lerna bootstrap
	run: npm run bootstrap

	- name: Build
	run: npm run build

	- name: Test
	env:
	SAUCE_USERNAME: ${{ secrets.SAUCE_USERNAME }}
	SAUCE_ACCESS_KEY: ${{ secrets.SAUCE_ACCESS_KEY }}
	run: npm run test-sauce

Provide feedback