Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/lint-github-actions.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
---
# Run this locally with act - https://github.com/nektos/act
# act -j lintGitHubActions
name: Lint GitHub Actions

Check warning on line 5 in .github/workflows/lint-github-actions.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

overly broad permissions

on: # yamllint disable-line rule:truthy
push:
Expand All @@ -21,13 +21,13 @@
cancel-in-progress: true

jobs:
lintGitHubActionsWithActionLint:

Check warning on line 24 in .github/workflows/lint-github-actions.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

overly broad permissions
runs-on: ubuntu-latest
timeout-minutes: 15

steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
persist-credentials: false
sparse-checkout: |
Expand All @@ -35,7 +35,7 @@
sparse-checkout-cone-mode: false

- name: Lint GitHub Actions
uses: reviewdog/action-actionlint@v1

Check failure on line 38 in .github/workflows/lint-github-actions.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

unpinned action reference

- name: Check GitHub Actions with 'actionlint'
# Ref: https://github.com/rhysd/actionlint/blob/main/docs/usage.md#use-actionlint-on-github-actions
Expand All @@ -57,7 +57,7 @@

steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
persist-credentials: false
sparse-checkout: |
Expand All @@ -65,7 +65,7 @@
sparse-checkout-cone-mode: false

- name: Setup Rust
uses: actions-rust-lang/setup-rust-toolchain@v1

Check failure on line 68 in .github/workflows/lint-github-actions.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

unpinned action reference

- name: Install zizmor
run: cargo install zizmor
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/lint-markdown.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,19 +20,19 @@
cancel-in-progress: true

jobs:
lintMarkdown:

Check warning on line 23 in .github/workflows/lint-markdown.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

overly broad permissions
runs-on: ubuntu-latest
timeout-minutes: 15

steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
persist-credentials: false

- name: Set up Ruby
# See https://github.com/ruby/setup-ruby#versioning
uses: ruby/setup-ruby@v1

Check failure on line 35 in .github/workflows/lint-markdown.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

unpinned action reference
with:
ruby-version: 3.0

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/lint-shell-script.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,15 +23,15 @@

jobs:

lintShellScript:

Check warning on line 26 in .github/workflows/lint-shell-script.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

overly broad permissions
runs-on: ubuntu-latest
timeout-minutes: 15

steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
persist-credentials: false

- name: Run ShellCheck
uses: ludeeus/[email protected]

Check failure on line 37 in .github/workflows/lint-shell-script.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

unpinned action reference
2 changes: 1 addition & 1 deletion .github/workflows/lint-yaml.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -24,18 +24,18 @@
cancel-in-progress: true

jobs:
lintYaml:

Check warning on line 27 in .github/workflows/lint-yaml.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

overly broad permissions
runs-on: ubuntu-latest
timeout-minutes: 15

steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
persist-credentials: false

- name: Check YAML files with linter
uses: ibiqlik/action-yamllint@v3

Check failure on line 38 in .github/workflows/lint-yaml.yaml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

unpinned action reference
with:
# All files under base dir
file_or_dir: "."
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/validate-links.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,14 +22,14 @@

jobs:

validateLinks:

Check warning on line 25 in .github/workflows/validate-links.yml

View workflow job for this annotation

GitHub Actions / lintGitHubActionsForSecurity

overly broad permissions
runs-on: ubuntu-latest
timeout-minutes: 60

steps:

- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
persist-credentials: false

Expand Down
Loading