Files
git-workflows/.gitea/scoped_workflows/validate.yml
T
Tirsvad a8c46ecdbe
TirSystem/git-workflows: Publish wiki / publish-wiki (push) Skipped
Validate workflows / validate (pull_request) Successful in 58s
TirSystem/git-workflows: OpenGrep / opengrep (pull_request) Failing after 6s
TirSystem/git-workflows: Validate / validate (pull_request) Failing after 6s
Fetch the scoped workflow scripts at v3 and clear the scan findings
The scoped workflows fetched their scripts at v2 (v1 for the metadata sync),
which has none of the new scripts; the next release is 3.0.0, so they fetch v3.
Shorten the run block of publish-wiki-pages.yml to five lines (WF-20) and
silence the six OpenGrep ERROR findings that are list-form subprocess calls and
the parse of the project's own coverage report, each with its reason.

Task: MIL-016#4
Task: MIL-017#4
Task: MIL-018#4
Task: MIL-019#3
2026-10-29 13:56:22 +08:00

39 lines
1.2 KiB
YAML

name: Validate
# Scoped workflow: it runs in every repository of an organization, so there is
# no caller and no input. It checks the workflow files (the criteria of
# QC-WF-001 that a script can decide) and the tracked shell scripts
# (shellcheck and shfmt) of the repository, and ends green when there is
# nothing to check (ADR-0016). The status is "Validate / validate (<event>)",
# which the release workflow reads. The script is a file of
# TirSystem/git-workflows (tools/validate_repo.py), fetched at v3.
on:
pull_request:
push:
branches: [ main ]
workflow_dispatch:
jobs:
validate:
name: validate
permissions:
contents: read
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Check out the repository
uses: actions/checkout@v4.2.2
- name: Fetch the shared script
uses: actions/checkout@v4.2.2
with:
repository: TirSystem/git-workflows
ref: v3
path: shared-scripts
- name: Install the validation tools
run: python3 shared-scripts/tools/validate_repo.py install
- name: Check the workflow files and the shell scripts
run: .validate-venv/bin/python shared-scripts/tools/validate_repo.py run