TirSystem/git-workflows: Publish wiki / publish-wiki (push) Skipped
Validate workflows / validate (pull_request) Successful in 58s
TirSystem/git-workflows: OpenGrep / opengrep (pull_request) Failing after 6s
TirSystem/git-workflows: Validate / validate (pull_request) Failing after 6s
The scoped workflows fetched their scripts at v2 (v1 for the metadata sync), which has none of the new scripts; the next release is 3.0.0, so they fetch v3. Shorten the run block of publish-wiki-pages.yml to five lines (WF-20) and silence the six OpenGrep ERROR findings that are list-form subprocess calls and the parse of the project's own coverage report, each with its reason. Task: MIL-016#4 Task: MIL-017#4 Task: MIL-018#4 Task: MIL-019#3
39 lines
1.2 KiB
YAML
39 lines
1.2 KiB
YAML
name: Validate
|
|
|
|
# Scoped workflow: it runs in every repository of an organization, so there is
|
|
# no caller and no input. It checks the workflow files (the criteria of
|
|
# QC-WF-001 that a script can decide) and the tracked shell scripts
|
|
# (shellcheck and shfmt) of the repository, and ends green when there is
|
|
# nothing to check (ADR-0016). The status is "Validate / validate (<event>)",
|
|
# which the release workflow reads. The script is a file of
|
|
# TirSystem/git-workflows (tools/validate_repo.py), fetched at v3.
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches: [ main ]
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
validate:
|
|
name: validate
|
|
permissions:
|
|
contents: read
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 10
|
|
steps:
|
|
- name: Check out the repository
|
|
uses: actions/checkout@v4.2.2
|
|
|
|
- name: Fetch the shared script
|
|
uses: actions/checkout@v4.2.2
|
|
with:
|
|
repository: TirSystem/git-workflows
|
|
ref: v3
|
|
path: shared-scripts
|
|
|
|
- name: Install the validation tools
|
|
run: python3 shared-scripts/tools/validate_repo.py install
|
|
|
|
- name: Check the workflow files and the shell scripts
|
|
run: .validate-venv/bin/python shared-scripts/tools/validate_repo.py run
|