mirror of
https://github.com/mirkobrombin/raven.git
synced 2026-11-05 21:56:33 +00:00
63 lines
1.6 KiB
YAML
63 lines
1.6 KiB
YAML
name: Workflows
|
|
|
|
on:
|
|
push:
|
|
branches: ["main"]
|
|
paths: [".github/**"]
|
|
pull_request:
|
|
paths: [".github/**"]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: workflows-${{ github.ref }}
|
|
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
|
|
|
|
env:
|
|
ACTIONLINT_VERSION: "v1.7.12"
|
|
GO_VERSION: "1.25.13"
|
|
ZIZMOR_VERSION: "1.32.0"
|
|
|
|
jobs:
|
|
actionlint:
|
|
name: Actionlint
|
|
runs-on: ubuntu-26.04
|
|
timeout-minutes: 10
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
cache: false
|
|
|
|
# The runner image ships shellcheck, which actionlint uses for the scripts inside run steps.
|
|
- name: Lint workflows
|
|
run: |
|
|
go install "github.com/rhysd/actionlint/cmd/actionlint@${ACTIONLINT_VERSION}"
|
|
"$(go env GOPATH)/bin/actionlint" -color
|
|
|
|
- name: Lint workflow scripts
|
|
run: shellcheck .github/scripts/*.sh
|
|
|
|
zizmor:
|
|
name: Zizmor
|
|
runs-on: ubuntu-26.04
|
|
timeout-minutes: 10
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Audit workflows
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
run: |
|
|
pipx run "zizmor==${ZIZMOR_VERSION}" --persona=auditor --format=github .github/workflows
|