Merge PR #168 #346
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# This GitHub Actions workflow is named "ActionLint". | |
# It is triggered on push events and manually via the workflow_dispatch event. | |
# | |
# Permissions: | |
# - Read access to repository contents. | |
# - Write access to pull requests. | |
# | |
# Jobs: | |
# - job-1: | |
# - Runs on the latest Ubuntu runner. | |
# - Steps: | |
# - Harden Runner: Uses the step-security/harden-runner action to audit egress policy. | |
# - Checkout: Uses the actions/checkout action to check out the repository. | |
# - ActionLint: Uses the devops-actions/actionlint action to lint the workflow files. | |
# - Continues on error and sets the ID to action-lint. | |
name: ActionLint | |
on: | |
push: | |
workflow_dispatch: | |
permissions: | |
contents: read | |
pull-requests: write | |
jobs: | |
job-1: | |
runs-on: ubuntu-latest | |
steps: | |
- name: Harden Runner | |
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0 | |
with: | |
egress-policy: audit | |
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
- uses: devops-actions/actionlint@c6744a34774e4e1c1df0ff66bdb07ec7ee480ca0 #v0.1.9 | |
continue-on-error: true | |
id: action-lint |