chore(deps): bump goreleaser/goreleaser-action from 9a127d869fb706213d29cdf8eef3a4ea2b869415 to ec59f474b9834571250b370d4735c50f8e2d1e29 #189
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Self — PR Validation | |
| on: | |
| pull_request: | |
| branches: | |
| - develop | |
| - main | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| checks: read | |
| jobs: | |
| # ----------------- PR Validation ----------------- | |
| validation: | |
| if: github.event_name == 'pull_request' | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| issues: write | |
| checks: read | |
| uses: ./.github/workflows/pr-validation.yml | |
| with: | |
| enforce_source_branches: true | |
| allowed_source_branches: "develop|hotfix/*" | |
| target_branches_for_source_check: "main" | |
| secrets: inherit | |
| # ----------------- Changed Files Detection ----------------- | |
| changed-files: | |
| name: Detect Changed Files | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| outputs: | |
| yaml_files: ${{ steps.detect.outputs.yaml-files }} | |
| workflow_files: ${{ steps.detect.outputs.workflow-files }} | |
| action_files: ${{ steps.detect.outputs.action-files }} | |
| composite_files: ${{ steps.detect.outputs.composite-files }} | |
| markdown_files: ${{ steps.detect.outputs.markdown-files }} | |
| all_files: ${{ steps.detect.outputs.all-files }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Detect changed files | |
| id: detect | |
| uses: ./src/config/changed-workflows | |
| with: | |
| github-token: ${{ github.token }} | |
| # ----------------- YAML Lint ----------------- | |
| yamllint: | |
| name: YAML Lint | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.yaml_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: YAML Lint | |
| uses: ./src/lint/yamllint | |
| with: | |
| file-or-dir: ${{ needs.changed-files.outputs.yaml_files }} | |
| # ----------------- Action Lint ----------------- | |
| actionlint: | |
| name: Action Lint | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.workflow_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Action Lint | |
| uses: ./src/lint/actionlint | |
| with: | |
| files: ${{ needs.changed-files.outputs.workflow_files }} | |
| # ----------------- Pinned Actions Check ----------------- | |
| pinned-actions: | |
| name: Pinned Actions Check | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.action_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Pinned Actions Check | |
| uses: ./src/lint/pinned-actions | |
| with: | |
| files: ${{ needs.changed-files.outputs.action_files }} | |
| # ----------------- Markdown Link Check ----------------- | |
| markdown-link-check: | |
| name: Markdown Link Check | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.markdown_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Markdown Link Check | |
| uses: ./src/lint/markdown-link-check | |
| with: | |
| file-path: ${{ needs.changed-files.outputs.markdown_files }} | |
| # ----------------- Spelling Check ----------------- | |
| typos: | |
| name: Spelling Check | |
| needs: changed-files | |
| if: needs.changed-files.outputs.all_files != '' | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Spelling Check | |
| uses: ./src/lint/typos | |
| with: | |
| files: ${{ needs.changed-files.outputs.all_files }} | |
| # ----------------- Shell Check ----------------- | |
| shellcheck: | |
| name: Shell Check | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.action_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Shell Check | |
| uses: ./src/lint/shellcheck | |
| with: | |
| files: ${{ needs.changed-files.outputs.action_files }} | |
| # ----------------- README Check ----------------- | |
| readme-check: | |
| name: README Check | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.action_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: README Check | |
| uses: ./src/lint/readme-check | |
| with: | |
| files: ${{ needs.changed-files.outputs.action_files }} | |
| # ----------------- Composite Schema Lint ----------------- | |
| composite-schema: | |
| name: Composite Schema Lint | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.composite_files != '' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Composite Schema Lint | |
| uses: ./src/lint/composite-schema | |
| with: | |
| files: ${{ needs.changed-files.outputs.composite_files }} | |
| # ----------------- CodeQL Analysis ----------------- | |
| codeql: | |
| name: CodeQL Analysis | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| needs: changed-files | |
| if: needs.changed-files.outputs.action_files != '' | |
| permissions: | |
| contents: read | |
| security-events: write | |
| pull-requests: write | |
| actions: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Generate CodeQL config for changed files | |
| id: codeql-config | |
| uses: ./src/security/codeql-config | |
| with: | |
| changed-paths: ${{ needs.changed-files.outputs.action_files }} | |
| - name: Initialize CodeQL | |
| if: steps.codeql-config.outputs.skip != 'true' | |
| uses: ./src/security/codeql-init | |
| with: | |
| languages: actions | |
| config-file: ${{ steps.codeql-config.outputs.config-file }} | |
| - name: Perform CodeQL Analysis | |
| if: steps.codeql-config.outputs.skip != 'true' | |
| uses: ./src/security/codeql-analyze | |
| with: | |
| category: '/language:actions' | |
| - name: Post CodeQL Results to PR | |
| if: always() && github.event_name == 'pull_request' && steps.codeql-config.outputs.skip != 'true' | |
| uses: ./src/security/codeql-reporter | |
| with: | |
| github-token: ${{ secrets.MANAGE_TOKEN || github.token }} | |
| languages: actions | |
| # ----------------- Lint Report ----------------- | |
| lint-report: | |
| name: Lint Report | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| permissions: | |
| actions: read | |
| contents: read | |
| pull-requests: write | |
| issues: write | |
| checks: read | |
| needs: [changed-files, yamllint, actionlint, pinned-actions, markdown-link-check, typos, shellcheck, readme-check, composite-schema] | |
| if: always() && github.event_name == 'pull_request' && needs.changed-files.result == 'success' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Post Lint Report | |
| uses: ./src/notify/pr-lint-reporter | |
| with: | |
| github-token: ${{ secrets.MANAGE_TOKEN || github.token }} | |
| yamllint-result: ${{ needs.yamllint.result }} | |
| yamllint-files: ${{ needs.changed-files.outputs.yaml_files }} | |
| actionlint-result: ${{ needs.actionlint.result }} | |
| actionlint-files: ${{ needs.changed-files.outputs.workflow_files }} | |
| pinned-actions-result: ${{ needs.pinned-actions.result }} | |
| pinned-actions-files: ${{ needs.changed-files.outputs.action_files }} | |
| markdown-result: ${{ needs.markdown-link-check.result }} | |
| markdown-files: ${{ needs.changed-files.outputs.markdown_files }} | |
| typos-result: ${{ needs.typos.result }} | |
| typos-files: ${{ needs.changed-files.outputs.all_files }} | |
| shellcheck-result: ${{ needs.shellcheck.result }} | |
| shellcheck-files: ${{ needs.changed-files.outputs.action_files }} | |
| readme-result: ${{ needs.readme-check.result }} | |
| readme-files: ${{ needs.changed-files.outputs.action_files }} | |
| composite-schema-result: ${{ needs.composite-schema.result }} | |
| composite-schema-files: ${{ needs.changed-files.outputs.composite_files }} |